Meta Box

Maybe this would be an option especially if the vulnerability is fixed: Release a bogus update that changes the version of Meta Box User Profile to 3.12.0. This way, you don't need work with Wordfence/Patchstack's support.

After updating to 1.8.2, scripts and styles are now loading on all pages - regardless if the custom block is used or not. Before, it was only loading them if the block was used. Can you please look into this?

Thanks for checking! Yes, I deactivated the Meta Box plugin and all the Meta Box add-ons. I am using only Meta Box AIO. But the password reveal icons are still not showing: https://scholarships.bocagrandewomansclub.org/

Thank you! I appreciate it.

Thank you for looking into this. The price field is just a regular text field. Here is the code:

$meta_boxes[] = array(
		'id'              => 'twt-product-modules',
		'title'           => 'TWT Product Modules',
		'type'            => 'block',
		'icon'            => 'editor-table',
		'category'        => 'layout',
		//'context'         => 'side',
		'render_template' => get_stylesheet_directory() . '/blocks/twt-product-modules.php',
		'supports'        => array(
			'anchor'          => true,
			'customClassName' => true,
			'align' => ['full','wide'],
		),
		'fields'          => array(
			array(
				'name'          => '',
				'id'            => 'modules',
				'type'          => 'group',
				'clone'         => true,
				'sort_clone'    => true,
				'collapsible'   => true,
				'default_state' => 'collapsed',
				'group_title'   => '{name}',
				'fields'        => array(
					array(
						'name' => 'Name',
						'id'   => 'name',
						'type' => 'text',
					),
					array(
						'name' => 'Price',
						'id'   => 'price',
						'type' => 'text',
					),
					array(
						'name' => 'Button Label',
						'id'   => 'btn_label',
						'type' => 'text',
					),
					array(
						'name' => 'Module URL',
						'id'   => 'btn_url',
						'type' => 'text',
					),
					array(
						'name' => 'Image',
						'id'   => 'img',
						'desc' => '472 by 306 pixels',
						'type' => 'single_image',
					)
				),
			),
		)
	);

<?php
$attr = $attributes;
if ( empty( $attr['data'] ) ) {
	return;
}
// Assign anchor if available 
$id = $attr['anchor'] ?? '';

// Custom CSS class name.
$class = trim('twt-product-modules ' . ( $attr['className'] ?? '' ));

if ( ! empty( $attr['align'] ) ) {
	$class .= " align{$attr['align']}";
}

if ( ! empty( $attr['data']['modules'] ) ) {
	?>
	<div<?= empty($id) ? '' : ' id="'.esc_attr($id).'"'; ?><?= empty( $class ) ? '' : ' class="'.esc_attr($class). '"'; ?>>
        <ul class="row twt-product-modules-row">
            <?php
            foreach($attr['data']['modules'] as $module) {
                ?>
                <li class="col-3 col-t-4 col-m-6">
                    <?php
                    if(empty($module['btn_url'])) {
                        ?><div class="twt-product-module"><?php
                    } else {
                        ?><a href="<?= $module['btn_url']; ?>" class="twt-product-module"><?php
		                }
                    ?>
                    <?= wp_get_attachment_image($module['img'], 'medium_large', false, array('class' => 'img', 'alt' => '')); ?>
                    <div class="content">
                        <h3 class="name"><strong><?= $module['name']; ?><?php if(!empty($module['price'])) { ?>:</strong> <?= $module['price']; ?>
                        <?php } else { ?>
                            </strong>
                        <?php } ?>
                        </h3>
                        <?php if(!empty($module['btn_label'])) { ?>
                        <p class="btn-c"><span class="btn small"><?= $module['btn_label']; ?></span></p>
                        <?php } ?>
                    </div>
                    <?php
                    if(!empty($module['btn_url'])) {
                        ?></a><?php
                    } else {
                        ?></div><?php
                    }
                    ?>
                </li>
                <?php
            }
            ?>
        </ul>
	</div>
	<?php
}

Also, on a different site, I just ran into the same issue after upgrading to MB Blocks 1.5.0. A \ is added before $ signs. But this time, in my block render callback function. It affected my JS code that is included in the render_callback function (see below for how it added \ before $). After downgrading to MB Blocks 1.4.2 the \$ were no longer added.

<script>
            jQuery(function(\$) {
                let hccf_dtable = \$('#households-table').DataTable({

Let me know if you need more information.

Thank you!