Skip to content
OpenAdvisories

Vendor

Meta Box

2 known vulnerabilities.

Products

Meta Box Frontend Submission 1 Meta Box AIO 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-13355 Public exploit

    Meta Box AIO <= 3.11.0 And Standalone Plugin Extensions - Unauthenticated Privilege Escalation to Administrator to 'rwmb_frontend_field_object_id' Parameter

    The Meta Box AIO plugin for WordPress is vulnerable to Privilege Escalation to Administrator in versions up to, and including, 3.11.0. This is due to a chained flaw: the populate_via_query_string() function in the mb-frontend-submission component unconditiona…

    Meta Box Meta Box Frontend Submission Web / CMS