Meta Box – WordPress Custom Fields Framework, CVE-2019-14793

CVE, Research URL: CVE-2019-14793
Home page URL: Security reports for Meta Box – WordPress Custom Fields Framework
Application: Meta Box – WordPress Custom Fields Framework
Published on: -
Research Description: The Meta Box plugin before 4.16.3 for WordPress allows file deletion via ajax, with the wp-admin/admin-ajax.php?action=rwmb_delete_file attachment_id parameter.
Affected versions: max 4.16.3.
Status: vulnerable

Meta Box &#8211; WordPress Custom Fields Framework, CVE-2019-14793