eLightUp vulnerabilities

🔔 Create alert RSS

Published CVEs affecting eLightUp products: 3 record(s), with severity, exploitation and fixes.

Meta Box – WordPress Custom Fields Framework 1 Slim SEO 1 Meta Box AIO 1

Exploited only (KEV) →

CVE-2026-39761 Critical · 9.8 CWE-266 Oct 6, 2026

WordPress Meta Box AIO plugin <= 3.7.1 - Privilege Escalation vulnerability

Unauthenticated Privilege Escalation in Meta Box AIO <= 3.7.1 versions.

CVE-2026-57429 Medium · 6.5 CWE-862 Jun 25, 2026

WordPress Slim SEO plugin <= 4.6.2 - Broken Access Control vulnerability

Contributor Broken Access Control in Slim SEO <= 4.6.2 versions.

CVE-2026-39468 Medium · 6.8 Public exploit CWE-22 Jun 15, 2026

WordPress Meta Box – WordPress Custom Fields Framework plugin <= 5.11.1 - Arbitrary File Deletion vulnerability

Contributor Arbitrary File Deletion in Meta Box – WordPress Custom Fields Framework <= 5.11.1 versions.