Threats tagged 'ghsa-x9qq-f758-q4c6'

A missing authorization vulnerability exists in the Meta Box – WordPress Custom Fields Framework (meta-box) up to version 5.15.3. This flaw allows exploitation of incorrectly configured access control security levels, potentially leading to unauthorized data disclosure. The vulnerability has a CVSS score of 6.5, indicating a medium severity impact primarily on confidentiality. No public exploits or patches are currently documented.