Skip to content
OpenAdvisories

Vendor

Meta Box

5 known vulnerabilities.

Products

Meta Box 2 Meta Box Frontend Submission 1 Meta Box – A Framework for Dynamic Websites 1 Meta Box AIO 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.2
    CVE-2025-14675

    Meta Box <= 5.11.1 - Authenticated (Contributor+) Arbitrary File Deletion

    The Meta Box plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'ajax_delete_file' function in all versions up to, and including, 5.11.1. This makes it possible for authenticated attackers, with Contr…

    Meta Box Meta Box wpmetabox/meta-box Web / CMS Packagist