The CVE-2026-109700 vulnerability in the Meta Box – WordPress Custom Fields Framework plugin allows attackers to exploit incorrectly configured access control security levels due to missing authorization. This issue affects versions up to 5.15.2 and has been addressed in version 5.15.3. Defenders responsible for WordPress installations using this plugin should assess exposure and prioritize updating to ve [truncated]
A CVE record for a Broken Access Control vulnerability in Slim SEO plugin versions <= 4.6.2 was published on June 25, 2026, and last modified on October 25, 2026.
CVE-2026-39468 is a medium-severity vulnerability in the Meta Box – WordPress Custom Fields Framework plugin, allowing contributors to delete arbitrary files. The vulnerability has a CVSS score of 6.8 and was published on [cvePublishedAt](https://www.cve.org/CVERecord?id=CVE-2026-39468).
