Skip to content
OpenAdvisories

Vendor

Meta Box

5 known vulnerabilities.

Products

Meta Box 2 Meta Box Frontend Submission 1 Meta Box – A Framework for Dynamic Websites 1 Meta Box AIO 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.9
    CVE-2026-109216

    Meta Box <= 5.15.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Background Field Array Keys

    The Meta Box – A Framework for Dynamic Websites plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'profile_background[<attacker-chosen key>]' parameter in all versions up to, and including, 5.15.2 due to insufficient input sanitization…

    Meta Box Meta Box – A Framework for Dynamic Websites Web / CMS
  • Medium 6.4
    CVE-2023-6526

    Meta Box – WordPress Custom Fields Framework <= 5.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The Meta Box – WordPress Custom Fields Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via custom post meta values displayed through the plugin's shortcode in all versions up to, and including, 5.9.2 due to insufficient input sanit…

    Meta Box Meta Box Web / CMS