Skip to content
PluginCanary

Meta Box - A Framework for Dynamic Websites

by Meta Box · 500,000+ active installs · Checked 3 Nov 2026
Healthy2 Warnings

Healthy: vulnerability published 28 Oct 2026, fixed in 5.15.3.

85/ 100 Canary Score
Sub-scores for Meta Box - A Framework for Dynamic Websites
Ownership100
Maintenance100
Security65
Support70
Reputation85

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 28 Oct 2026, fixed in 5.15.3. Update to version 5.15.3 or later.28 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 20 Oct 2026, fixed in 5.15.3. Update to version 5.15.3 or later.20 Oct 2026Evidence
  • InfoSEC-35 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
rilwis7 Nov 2011 to 20 Oct 2026, 417 commits

1 committer recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
15 days ago
Releases, 24 months
31
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter for Meta Box - A Framework for Dynamic Websites
Q1 20244
Q2 20244
Q3 20245
Q4 20243
Q1 20253
Q2 20252
Q3 20254
Q4 20255
Q1 20265
Q2 20262
Q3 20266
Q4 20262

Last release 20 Oct 2026. Tested with WordPress 7.1 (current).

Support

100% of 1 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
28 Oct 2026Meta Box <= 5.15.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Background Field Array Keys4.9<= 5.15.25.15.30
20 Oct 2026Meta Box – A Framework for Dynamic Websites <= 5.15.2 - Missing Authorization4.3<= 5.15.25.15.30
2 Aug 2026Meta Box < 5.13.1 - Authenticated (Contributor+) Insecure Direct Object Reference4.3< 5.13.15.13.10
13 Apr 2026Meta Box <= 5.11.1 - Authenticated (Contributor+) Arbitrary File Deletion8.1<= 5.11.15.11.20
6 Mar 2026Meta Box <= 5.11.1 - Authenticated (Contributor+) Arbitrary File Deletion7.2<= 5.11.15.11.20
9 Aug 2024Meta Box – WordPress Custom Fields Framework <= 5.9.10 - Missing Authorization to Information Exposure4.3<= 5.9.105.9.110
25 Mar 2024Meta Box – WordPress Custom Fields Framework <= 5.9.3 - Authenticated (Contributor+) Information Exposure via Post Meta4.3<= 5.9.35.9.40
5 Feb 2024Meta Box – WordPress Custom Fields Framework <= 5.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 5.9.25.9.30
2 Feb 2019Meta Box - WordPress Custom Fields Framework <= 4.16.2 - File Deletion via attachment_id Parameter8.1< 4.16.34.16.30
1 Feb 2019Meta Box <= 4.16.1 - Mishandling of File Upload7.5<= 4.16.14.16.20

Source: Wordfence Intelligence.

Reputation

Average rating per quarter for Meta Box - A Framework for Dynamic Websites
Q4 20234.3
Q1 20245.0
Q2 20245.0
Q3 20245.0
Q4 20243.0
Q3 20255.0
Q4 20255.0
Q1 20265.0
Q2 20265.0
Q3 20265.0

Average rating rose from 4.3 to 5.0 between Q4 2023 and Q3 2026.

Rating distribution
5 star151
4 star8
3 star1
2 star1
1 star4
Latest low reviews

Momentum

500,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Meta Box - A Framework for Dynamic Websites
4 May 202610,592
11 May 202620,029
18 May 202630,456
25 May 202616,280
1 Jun 202614,002
8 Jun 2026115,609
15 Jun 202632,663
22 Jun 202620,591
29 Jun 202617,884
6 Jul 2026133,570
13 Jul 2026136,000
20 Jul 202630,652
27 Jul 2026120,874
3 Aug 202645,240
10 Aug 202654,394
17 Aug 2026108,750
24 Aug 202623,228
31 Aug 2026114,695
7 Sep 202628,385
14 Sep 2026128,374
21 Sep 202633,083
28 Sep 202618,265
5 Oct 2026112,873
12 Oct 202625,873
19 Oct 2026125,966
26 Oct 202640,797
2 Nov 20263,520

Weekly downloads over the last 4 weeks are 15% below the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

ACF Content Analysis for Yoast SEOScore 91 · 100,000+Image Aspect Ratio Crop Field for Advanced Custom FieldsScore 91 · 20,000+Custom Post Types and Custom Fields creator - WCKScore 91 · 10,000+Genesis Custom BlocksScore 91 · 10,000+WPGraphQL for ACFScore 91 · 10,000+

Facts

Version5.15.3
AuthorMeta Box
Added7 Nov 2011
Last updated20 Oct 2026
Active installs500,000+
Requires WordPress6.7
Tested up to7.1.4
Requires PHP7.4
CategoryDeveloper Tools & Customization > API & Webhook Integration
Tagsmeta box, post type, custom fields, custom post types, Custom Taxonomies

Questions

Is Meta Box - A Framework for Dynamic Websites still maintained?

Meta Box - A Framework for Dynamic Websites was last updated on 20 Oct 2026. Its Canary status is Healthy.

Is Meta Box - A Framework for Dynamic Websites safe?

Meta Box - A Framework for Dynamic Websites has no open unpatched vulnerabilities on record. 5 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns Meta Box - A Framework for Dynamic Websites?

The wordpress.org author is Meta Box. Recent committers: rilwis, plugin-master. We have recorded no ownership change.

What can I use instead of Meta Box - A Framework for Dynamic Websites?

Plugins in the same category with a higher Canary Score: ACF Content Analysis for Yoast SEO, Image Aspect Ratio Crop Field for Advanced Custom Fields, Custom Post Types and Custom Fields creator - WCK, Genesis Custom Blocks, WPGraphQL for ACF.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue