CVE-2024-1204

The Meta Box plugin for WordPress contains an information disclosure vulnerability affecting versions up to 5.9.3. The flaw exists because the rwmb_meta shortcode fails to adequately control which post metadata can be accessed. Authenticated users with contributor-level permissions or higher can exploit this weakness to retrieve sensitive post meta data that should be restricted.

Based on public CVE data (MITRE/NVD).