{"uuid": "d7a38f2f-5efb-4409-b69e-7cf30912ec18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-13355", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117313517927990850", "content": "Privilege escalation (CRITICAL, CVE-2026-13355) in Meta Box Frontend Submission <=4.5.6 & User Profile <=3.11.0 lets unauthenticated attackers gain admin on WordPress. Patch status TBD \u2014 restrict plugin use & monitor activity. Details: https://radar.offseq.com/threat/cve-2026-13355-cwe-269-improper-privilege-management-in-meta-box-meta-box-frontend-submission-7d7ee5c391cbe4a8 #OffSeq #WordPress #CVE2026_13355", "creation_timestamp": "2026-09-22T07:30:27.164578Z"}