jtsternberg CMB2

• CVE-2026-116761 Medium 5.4 CMB2 <= 2.13.4 - Unauthenticated Stored Cross-Site Scripting via Grouped WYSIWYG Field via Front-End Form 0.2%
• CVE-2026-102772 High 7.2 CMB2 <= 2.13.1 - Unauthenticated Stored Cross-Site Scripting via 'textarea_code' Field 0.3%
• CVE-2026-97336 High 7.2 CMB2 <= 2.13.0 - Unauthenticated Stored Cross-Site Scripting via 'file_list' Field Type 0.3%
• CVE-2024-1792 High 7.5 CMB2 <= 2.10.1 - Authenticated (Contributor+) PHP Object Injection 0.8%