mr2p vulnerabilities
4 published CVEs name mr2p among the affected products.
- 4Published CVEs4 of them scored
- 3Last 12 monthspublished in the last year
- 0Critical0 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-3173
Meta Field Block <= 1.5.1 - Insecure Direct Object Reference to Authenticated (Contributor+) Arbitrary User Meta Exposure
mr2p · Meta Field Block – Display custom fields in the Block Editor without coding
Medium6.5 - CVE-2026-6252
Meta Field Block <= 1.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'tagName' Block Attribute
mr2p · Meta Field Block – Display custom fields in the Block Editor without coding
Medium6.4 - CVE-2024-13362
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter
sebet · Go Fetch Jobs (for WP Job Manager)
Medium6.1 - CVE-2024-11098
SVG Block <= 1.1.24 - Authenticated (Administrator+) Stored Cross-Site Scripting via SVG File Upload
mr2p · SVG Block
Medium5.5