Advisories · Technology
eLightUp Meta Box – WordPress Custom Fields Framework.
Every CVE that names eLightUp Meta Box – WordPress Custom Fields Framework among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.5 Medium
WordPress Meta Box – WordPress Custom Fields Framework plugin <= 5.15.3 - Cross Site Scripting (XSS) vulnerability
- eLightUp Meta Box – WordPress Custom Fields Framework
- Cross-site scripting (XSS)
- CVSS 6.5 Medium
WordPress Meta Box – WordPress Custom Fields Framework plugin <= 5.15.3 - Broken Access Control vulnerability
- eLightUp Meta Box – WordPress Custom Fields Framework
- Broken access control
- CVSS 6.5 Medium
WordPress Meta Box – WordPress Custom Fields Framework plugin <= 5.15.2 - Broken Access Control vulnerability
- eLightUp Meta Box – WordPress Custom Fields Framework
- Broken access control
- CVSS 6.8 Medium
WordPress Meta Box – WordPress Custom Fields Framework plugin <= 5.11.1 - Arbitrary File Deletion vulnerability
- eLightUp Meta Box – WordPress Custom Fields Framework
- Path traversal