frontend_submission vulnerabilities

CVEs whose affected-version data names the frontend_submission package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-13355Critical· 9.8PoC

yesterday

The Meta Box AIO plugin for WordPress is vulnerable to Privilege Escalation to Administrator in versions up to, and including, 3.11.0

The Meta Box AIO plugin for WordPress is vulnerable to Privilege Escalation to Administrator in versions up to, and including, 3.11.0. This is due to a chained flaw: the populate_via_query_string() function in the mb-frontend-submission …

▾ AbyssalMeta Box · Meta Box Frontend SubmissionEPSS 0.34%via NVD