Known vulnerabilities in mr2p Meta Field Block – Display custom fields in the Block Editor without coding
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-3173 | The Meta Field Block plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and… | 6.5 Medium | May 28, 2026 |
| CVE-2026-6252 | The Meta Field Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tagName' block attribute… | 6.4 Medium | May 14, 2026 |
| CVE-2024-13362 | Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in… | 6.1 Medium | May 1, 2026 |