Unknown Meta Box vulnerabilities

• metabox meta box Meta Box < 5.13.1 - Contributor+ Arbitrary Attachment Deletion via IDOR CVE-2026-15248 5.5 MediumAugust 2, 2026
• metabox meta box Meta Box < 5.9.4 - Contributor+ Arbitrary Posts' Custom Field Disclosure CVE-2024-1204 4.3 MediumApril 15, 2024