CVE-2019-14793

Description

References

• metabox.io/changelog · Vendor Advisory
• pluginvulnerabilities.com/2019/02/01/full-disclosure-of-authenticated-arbitrary-file-deletion-vulnerability-in-wordpress-plugin-with-300000-installs · Exploit

meta box 的其他漏洞

• CVE-2024-1204中危 4.3The Meta Box WordPress plugin before 5.9.4 does not prevent users with at least the contributor role from access arbitrary custom fields as…
• CVE-2023-6526中危 5.4The Meta Box – WordPress Custom Fields Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via custom post meta valu…
• CVE-2019-14794高危 7.5The Meta Box plugin before 4.16.2 for WordPress mishandles the uploading of files to custom folders.