eLightUp
Vulnerability activity for eLightUp: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 4
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 90 days
- CVEs
- 5
- Critical (CVSS 9+)
- 1
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 365 days
- CVEs
- 5
- Critical (CVSS 9+)
- 1
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Exploited now
None of this vendor's CVEs are on CISA's known-exploited list.
Recent
- 6.5MediumNov 7, 2026eLightUp Meta Box – WordPress Custom Fields Framework XSSCVE-2026-123472Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in eLightUp Meta Box – WordPress Custom Fields Framework meta-box allows Stored XSS.This issue affects Meta Box – WordPress Custom Fields Framework: from n/a through 5.15.3.
- 6.5MediumNov 7, 2026eLightUp Meta Box – WordPress Custom Fields Framework Auth bypass / access controlCVE-2026-120836Missing Authorization vulnerability in eLightUp Meta Box – WordPress Custom Fields Framework meta-box allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Meta Box – WordPress Custom Fields Framework: from n/a through 5.15.3.
- 5.3MediumOct 22, 2026eLightUp Falcon – WordPress Optimizations & Tweaks Auth bypass / access controlCVE-2026-112826Missing Authorization vulnerability in eLightUp Falcon – WordPress Optimizations & Tweaks falcon allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Falcon – WordPress Optimizations & Tweaks: from n/a through 2.12.0.
- 6.5MediumOct 20, 2026eLightUp Meta Box – WordPress Custom Fields Framework Auth bypass / access controlCVE-2026-109700Missing Authorization vulnerability in eLightUp Meta Box – WordPress Custom Fields Framework meta-box allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Meta Box – WordPress Custom Fields Framework: from n/a through 5.15.2.
- 9.8CriticalOct 6, 2026eLightUp Meta Box AIO Privilege escalationCVE-2026-39761Unauthenticated Privilege Escalation in Meta Box AIO <= 3.7.1 versions.
Top products
- Meta Box – WordPress Custom Fields Framework3 CVEs in the last year
- Meta Box AIO1 CVE in the last year, 1 critical
- Falcon – WordPress Optimizations & Tweaks1 CVE in the last year
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.