Meta Box AIO

Meta Box AIO has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it is fixed as of September 2026. Their average CVSS score is 9.1, and the most serious one scores 9.1 out of 10. Severity breakdown: 1 critical and 0 high.

The most common weakness is Missing Authorization, behind 1 of the records (100%).

The one issue recorded for Meta Box AIO has a vendor fix available, so running the current release closes it.

All of these findings were reported by Austin Ginder.

Strategic Overview

Avg CVSSCritical

9.1/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Meta Box AIO vulnerabilities before they are exploited.

Highest severity on recordCVSS 9.1CVE-2026-14488

Meta Box AIO <= 3.8.0 - Missing Authorization to Unauthenticated Arbitrary Post Deletion via 'rwmb_frontend_field_object_id' Parameter

Read the full analysis

Vulnerability Records

1 records


2026-07-28 20:51	Meta Box AIO <= 3.8.0 - Missing Authorization to Unauthenticated Arbitrary Post Deletion via 'rwmb_frontend_field_object_id' Parameter Meta Box AIO <= 3.8.0	`CVE-2026-14488`	9.1 Critical	Austin Ginder	Yes

Showing 1–1 of 1 reports