CVE-2019-14793

PoC —

CVSS 3.0

6.5 medium

EPSS

2%p76

Published

Aug 9, 2019 (Aug 9, 2019)

Modified

Jun 17, 2026

Description

The Meta Box plugin before 4.16.3 for WordPress allows file deletion via ajax, with the wp-admin/admin-ajax.php?action=rwmb_delete_file attachment_id parameter.

Vendors: metabox
Products: meta box
Ecosystems: WordPress
Weakness: CWE-862
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (1.7%)

In the news0 stories

No ingested article mentions this CVE yet.