Meta-box GalleryMeta
Meta-box GalleryMeta has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2026; all 2 are fixed as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.4 out of 10. 2026 was the busiest year with 2 disclosures.
The most common weakness is Cross-Site Scripting, behind 1 of the records (50%). Other recurring categories include Missing Authorization.
Every one of the 2 issues recorded for Meta-box GalleryMeta has a vendor fix available, so running the current release closes all known holes.
All of these findings were reported by Kazuma Matsumoto. The current release is tested up to WordPress 6.9.7.
CVE-2026-1302Meta-box GalleryMeta <= 3.0.1 - Authenticated (Editor+) Stored Cross-Site Scripting via Image Caption
Read the full analysisVulnerability Records

Meta-box GalleryMeta
Author
Md. Shahinur Islam
Drag and drop multiple image upload by meta-box gallery for WordPress. Take full control over your WordPress site, build any gallery you can imagine – no programming knowledge required. Docs & Support You can find docs, FAQ and more detailed information about Meta-box GalleryMeta on gitlab. If you were unable to find the answer to your question on the FAQ or in any of the documentation, you should check the support forum on WordPress.org. If you can’t locate any topics that pertain to your particular issue, post a new topic for it. Meta-box GalleryMeta Needs Your Support It is hard to continue development and support for this free plugin without contributions from users like you. If you enjoy using Meta-box GalleryMeta and find it useful, please consider making a donation. Your donation will help encourage and support the plugin’s continued development and better user support. Find on gitlab. Gitlab Our Other Plugins Download PDF After Submit Form Feedback Form Users Meta-box GalleryMeta Post Auto Vertical Scrolling Simple Font Resizer Career Section Scoreboard UI Post Date Range Filter
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C