jtsternberg CMB2

2 known vulnerabilities in jtsternberg CMB2, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

CVE-2026-97336 CVSS 7.2 high The CMB2 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'file_list' Field Type in all versions up to, and…
CVE-2026-102772 CVSS 7.2 high The CMB2 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '<textarea_code field id> (e.g. kl_code, kl_post_code)'…