CVE-2026-13355 | Meta Box AIO Plugin on WordPress mb-frontend-submission/mb-user-profile Form::process rwmb_frontend_field_object_id privileges management (EUVD-2026-84268)

September 22, 2026 Yanac

A vulnerability described as critical has been identified in Meta Box AIO Plugin on WordPress. Impacted is the function Form::process of the component mb-frontend-submission/mb-user-profile. The manipulation of the argument rwmb_frontend_field_object_id results in improper privilege management.

This vulnerability is identified as CVE-2026-13355. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More