eLightUp Vulnerabilities and Affected Products
Explore source-attributed vulnerabilities associated with eLightUp products.
Products
- eRocket1 vulnerability
- Meta Box – WordPress Custom Fields Framework1 vulnerability
- Slim SEO1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2026-57429MEDIUM | WordPress Slim SEO plugin <= 4.6.2 - Broken Access Control vulnerabilityContributor Broken Access Control in Slim SEO <= 4.6.2 versions. CWE-862Jun 25, 2026 | CVSS6.5v3.1 | EPSS0.299% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-39468MEDIUM | WordPress Meta Box – WordPress Custom Fields Framework plugin <= 5.11.1 - Arbitrary File Deletion vulnerabilityContributor Arbitrary File Deletion in Meta Box – WordPress Custom Fields Framework <= 5.11.1 versions. | CVSS6.8v3.1 | EPSS1.22% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware use1 Nuclei template | STIX |
CVE-2023-28174MEDIUM | WordPress eRocket Plugin <= 1.2.4 is vulnerable to Cross Site Scripting (XSS)Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in eLightUp eRocket plugin <= 1.2.4 versions. CWE-79Jun 22, 2023 | CVSS5.9v3.1 | EPSS0.392% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |