eLightUp vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 20267

Newest CVEs

• CVE-2026-123472

  WordPress Meta Box – WordPress Custom Fields Framework plugin <= 5.15.3 - Cross Site Scripting (XSS) vulnerability

  eLightUp · Meta Box – WordPress Custom Fields Framework

  Medium6.5
• CVE-2026-120836

  WordPress Meta Box – WordPress Custom Fields Framework plugin <= 5.15.3 - Broken Access Control vulnerability

  eLightUp · Meta Box – WordPress Custom Fields Framework

  Medium6.5
• CVE-2026-112826

  WordPress Falcon – WordPress Optimizations & Tweaks plugin <= 2.12.0 - Broken Access Control vulnerability

  eLightUp · Falcon – WordPress Optimizations & Tweaks

  Medium5.3
• CVE-2026-109700

  WordPress Meta Box – WordPress Custom Fields Framework plugin <= 5.15.2 - Broken Access Control vulnerability

  eLightUp · Meta Box – WordPress Custom Fields Framework

  Medium6.5
• CVE-2026-39761

  WordPress Meta Box AIO plugin <= 3.7.1 - Privilege Escalation vulnerability

  eLightUp · Meta Box AIO

  Critical9.8
• CVE-2026-57429

  WordPress Slim SEO plugin <= 4.6.2 - Broken Access Control vulnerability

  eLightUp · Slim SEO

  Medium6.5
• CVE-2026-39468

  WordPress Meta Box – WordPress Custom Fields Framework plugin <= 5.11.1 - Arbitrary File Deletion vulnerability

  eLightUp · Meta Box – WordPress Custom Fields Framework

  Medium6.8
• CVE-2023-28174

  WordPress eRocket Plugin <= 1.2.4 is vulnerable to Cross Site Scripting (XSS)

  eLightUp · eRocket

  Medium5.9