Meta Box

Security risk Meta Box AIO 3.12.0

Support › Meta Box AIO › Security risk Meta Box AIO 3.12.0

Viewing 3 posts - 1 through 3 (of 3 total)
  • Author
    Posts
  • October 5, 2026 at 11:35 PM #50227
    m.stefano@digitaldomain.it[email protected]
    Participant

    WordPress Meta Box AIO plugin <= 3.7.1 - Privilege Escalation vulnerability
    Fonte: Patchstack

    October 5, 2026 at 11:36 PM #50228
    m.stefano@digitaldomain.it[email protected]
    Participant

    https://patchstack.com/database/wordpress/plugin/meta-box-aio/vulnerability/wordpress-meta-box-aio-plugin-3-7-1-privilege-escalation-vulnerability

    October 6, 2026 at 12:33 AM #50229
    BellulBellul
    Participant

    Hi,

    WP Toolkit/Patchstack is currently warning about CVE-2026-39761, described as a privilege escalation vulnerability affecting Meta Box AIO versions up to and including 3.7.1.

    I am currently running Meta Box AIO 3.12.0.

    Could you please clarify whether version 3.12.0 is affected by CVE-2026-39761? If not, in which version was this vulnerability fixed?

    Patchstack currently states that there is “no official patch available”, so it is unclear whether later versions such as 3.12.0 are considered safe or simply have not yet been verified.

    Many thanks,
    Bengt

  • Author
    Posts
Viewing 3 posts - 1 through 3 (of 3 total)
  • You must be logged in to reply to this topic.