CVE-2026-120836
WordPress Meta Box – WordPress Custom Fields Framework plugin <= 5.15.3 - Broken Access Control vulnerability
Description
Missing Authorization vulnerability in eLightUp Meta Box – WordPress Custom Fields Framework meta-box allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Meta Box – WordPress Custom Fields Framework: from n/a through 5.15.3.
Affected products
| Vendor | Product | Versions |
|---|---|---|
| eLightUp | Meta Box – WordPress Custom Fields Framework | ≤5.15.3 |
References
External links from the record. They lead to third-party sites.