Skip to content
Sign in
4.3 Medium

CVE-2024-1204 The Meta Box WordPress plugin before 5.9.4 does not prevent users with at least the contributor role from access…

Description

The Meta Box WordPress plugin before 5.9.4 does not prevent users with at least the contributor role from access arbitrary custom fields assigned to other user's posts.

Affected products and versions

Product Affected versions Fixed in
Meta Box 5.9 earliest → < 5.9.4 5.9.4
meta_box 5.9 earliest → < 5.9.4 5.9.4

Other CVEs of Meta Box

The 2 CVEs of Meta Box →
CVE-2026-15248 The Meta Box WordPress plugin before 5.13.1 does not verify that a user is authorized to delete the supplied… 5.5 Medium
Track this CVE