[HIGH] Meta Box Plugin for WordPress: Authenticated (Contributor+) Arbitrary File Deletion via ajax_delete_file

PKSA-s98v-q9gv-s2bz CVE-2025-14675 GHSA-m4q3-832v-44j6

Affected package: wpmetabox/meta-box

Affected version: <5.11.2

Reported by:
GitHub