Skip to content
OpenAdvisories
High · 7.1 CVE-2024-43235 EUVD-2024-40128GHSA-x6qj-888v-44p6

WordPress Meta Box plugin <= 5.9.10 - Broken Access Control vulnerability

Published Nov 1, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Missing Authorization vulnerability in MetaBox.Io Meta Box – WordPress Custom Fields Framework allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Meta Box – WordPress Custom Fields Framework: from n/a through 5.9.10.

Affected products

VendorProductAffectedFixed
MetaBox.io Meta Box – WordPress Custom Fields Framework ≤ 5.9.10 —

References