jtsternberg

Products

Product	CVEs	Exploited	Latest
CMB2	4	–	Oct 28, 2026
Code Snippets CPT	1	–	Mar 8, 2025

CVE-2026-116761 Medium 5.4 CMB2 <= 2.13.4 - Unauthenticated Stored Cross-Site Scripting via Grouped WYSIWYG Field via Front-End Form 0.2%
CVE-2026-102772 High 7.2 CMB2 <= 2.13.1 - Unauthenticated Stored Cross-Site Scripting via 'textarea_code' Field 0.3%
CVE-2026-97336 High 7.2 CMB2 <= 2.13.0 - Unauthenticated Stored Cross-Site Scripting via 'file_list' Field Type 0.3%
CVE-2024-13895 Medium 4.3 Code Snippets CPT <= 2.1.0 - Authenticated (Subscriber+) Arbitrary Shortcode Execution 0.3%
CVE-2024-1792 High 7.5 CMB2 <= 2.10.1 - Authenticated (Contributor+) PHP Object Injection 0.8%