Vulnerabilities / Meta Box - WordPress Custom Fields Framework
Meta Box - WordPress Custom Fields Framework vulnerabilities
Advisories WPSec published for Meta Box – A Framework for Dynamic Websites. Other sources may list more. Its attack surface: Meta Box - WordPress Custom Fields Framework on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-21 | WPSEC-2026-1301 | Meta Box - WordPress Custom Fields Framework <= 5.15.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Editor Field | Medium 6.4 | 5.15.3 |
| 2026-10-21 | WPSEC-2026-1300 | Meta Box - WordPress Custom Fields Framework <= 5.15.2 - Authenticated (Contributor+) Sensitive Information Exposure via Block Bindings | Medium 6.5 | 5.15.3 |
| 2026-10-21 | WPSEC-2026-1299 | Meta Box - WordPress Custom Fields Framework <= 5.15.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Background Field | Medium 6.4 | 5.15.3 |
License: CC BY 4.0