Skip to content
OpenAdvisories

Vendor

Meta Box

5 known vulnerabilities.

Products

Meta Box 2 Meta Box Frontend Submission 1 Meta Box – A Framework for Dynamic Websites 1 Meta Box AIO 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-13355 Public exploit

    Meta Box AIO <= 3.11.0 And Standalone Plugin Extensions - Unauthenticated Privilege Escalation to Administrator to 'rwmb_frontend_field_object_id' Parameter

    The Meta Box AIO plugin for WordPress is vulnerable to Privilege Escalation to Administrator in versions up to, and including, 3.11.0. This is due to a chained flaw: the populate_via_query_string() function in the mb-frontend-submission component unconditiona…

    Meta Box Meta Box Frontend Submission Web / CMS
  • Critical 9.1
    CVE-2026-14488

    Meta Box AIO <= 3.8.0 - Missing Authorization to Unauthenticated Arbitrary Post Deletion via 'rwmb_frontend_field_object_id' Parameter

    The Meta Box AIO plugin for WordPress is vulnerable to Missing Authorization via the template_redirect dispatcher in the MB Frontend Submission extension in versions up to, and including, 3.8.0. This is due to the handle_request() function routing the mbfs_de…

    Meta Box Meta Box AIO Web / CMS