metabox.io
https://metabox.io/changelog CVE-2019-14794
HIGH
Record summary
CVE-2019-14794 has a selected CVSS score of 7.5 (high).
Description
The Meta Box plugin before 4.16.2 for WordPress mishandles the uploading of files to custom folders.
Description source: CVE List
References
2nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2019-14794