Elightup vulnerabilities

Products

• Meta Box – Wordpress Custom Fields Framework 4
• Falcon – Wordpress Optimizations & Tweaks 3

Newest

• elightup meta box – wordpress custom fields framework WordPress Meta Box – WordPress Custom Fields Framework plugin <= 5.15.3 - Cross Site Scripting (XSS) vulnerability CVE-2026-123472 6.5 MediumNovember 7, 2026
• elightup meta box – wordpress custom fields framework WordPress Meta Box – WordPress Custom Fields Framework plugin <= 5.15.3 - Broken Access Control vulnerability CVE-2026-120836 6.5 MediumNovember 7, 2026
• elightup falcon – wordpress optimizations & tweaks WordPress Falcon – WordPress Optimizations & Tweaks plugin <= 2.12.0 - Broken Access Control vulnerability CVE-2026-112826 5.3 MediumOctober 22, 2026
• elightup meta box – wordpress custom fields framework WordPress Meta Box – WordPress Custom Fields Framework plugin <= 5.15.2 - Broken Access Control vulnerability CVE-2026-109700 6.5 MediumOctober 20, 2026
• elightup meta box aio, meta box aio +1 more WordPress Meta Box AIO plugin <= 3.7.1 - Privilege Escalation vulnerability CVE-2026-39761 9.8 CriticalOctober 6, 2026
• anh tran falcon – wordpress optimizations & tweaks WordPress Falcon – WordPress Optimizations & Tweaks plugin <= 2.10.0 - Unknown vulnerability CVE-2026-59531 7.5 HighJuly 27, 2026
• anh tran slim seo WordPress Slim SEO plugin <= 4.6.2 - Broken Access Control vulnerability CVE-2026-57429 6.5 MediumJune 25, 2026
• elightup meta box – wordpress custom fields framework WordPress Meta Box – WordPress Custom Fields Framework plugin <= 5.11.1 - Arbitrary File Deletion vulnerability CVE-2026-39468 6.8 MediumJune 15, 2026
• anh tran falcon – wordpress optimizations & tweaks WordPress Falcon – WordPress Optimizations & Tweaks plugin <= 2.8.3 - Broken Access Control vulnerability CVE-2024-54384 4.3 MediumDecember 16, 2024
• elightup erocket WordPress eRocket Plugin <= 1.2.4 is vulnerable to Cross Site Scripting (XSS) CVE-2023-28174 5.9 MediumJune 22, 2023