Skip to content
OpenAdvisories

Vendor

shahinurislam

4 known vulnerabilities.

Products

Career Section 2 Meta-box GalleryMeta 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.4
    CVE-2026-1302

    Meta-box GalleryMeta <= 3.0.1 - Authenticated (Editor+) Stored Cross-Site Scripting via Image Caption

    The Meta-box GalleryMeta plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated atta…

    shahinurislam Meta-box GalleryMeta Web / CMS
  • Medium 4.3
    CVE-2026-0687

    Meta-box GalleryMeta <= 3.0.1 - Missing Authorization to Authenticated (Author+) Gallery Management

    The Meta-box GalleryMeta plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'mb_gallery' custom post type in all versions up to, and including, 3.0.1. This makes it possible for authenticated attac…

    shahinurislam Meta-box GalleryMeta Web / CMS