Meta Box Plugin Contributor IDOR Arbitrary Attachment Deletion (CVE-2026-15248)

wpscan.com 2026-08-02查看中文 →

Security AdvisoryCVE-2026-15248MediumMeta Box

Affected:

meta-box < 5.13.1

Fixed in:

5.13.1

Referenced CVEs: CVE-2026-15248

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from wpscan.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

WordPress Simple Membership Pre-Auth Admin Account Takeover via Username Collision (CVE-2026-15930) 2026-08-03 Simply Schedule Appointments <1.6.12.11 Incorrect Authorisation Vulnerability (CVE-2026-15254) 2026-08-03 TaxoPress simple-tags < 3.51.0 IDOR Allows Private Post Disclosure (CVE-2026-15231) 2026-08-03 Simple Membership < 4.7.8 Unauthenticated Stored XSS (CVE-2026-15931) 2026-08-03 Dokan Lite < 5.0.9 IDOR Vulnerability via REST API (CVE-2026-16565) 2026-08-03

Offline Archive

Offline screenshot & PDF are Pro-exclusive