CVE-2019-14793

The Meta Box plugin before 4.16.3 for WordPress allows file deletion via ajax, with the wp-admin/admin-ajax.php?action=rwmb_delete_file attachment_id parameter

published August 9, 2019

CVSS
—
EPSS
2%
Percentile
77.3
In the wild
Unconfirmed
What it is

The Meta Box plugin before 4.16.3 for WordPress allows file deletion via ajax, with the wp-admin/admin-ajax.php?action=rwmb_delete_file attachment_id parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01720 · 77.3th percentile
Published
2019-08-09T12:16Z
EPSS history
Timeline
  • 09 AUG 12:16Z
    The Meta Box plugin before 4.16.3 for WordPress allows file deletion via ajax, with the wp-admin/admin-ajax.php?action=rwmb_delete_file attachment_id parameter
    cvelistv5