Skip to content
Threat Feed
Subscribe

Product

Meta Box AIO (<= 3.11.0)

1 brief RSS
critical advisory

Unauthenticated Privilege Escalation in Meta Box AIO for WordPress

An unauthenticated privilege escalation vulnerability (CVE-2026-13355) in the Meta Box AIO plugin allows attackers to overwrite post content with arbitrary shortcodes to register administrative accounts.

PoC Meta Box AIO +4
1t 1c