jtsternberg vulnerabilities

CVEs per yearBy the year they were published

1. 20241
2. 20251
3. 20263

Newest CVEs

• CVE-2026-116761

  CMB2 <= 2.13.4 - Unauthenticated Stored Cross-Site Scripting via Grouped WYSIWYG Field via Front-End Form

  jtsternberg · CMB2

  Medium5.4
• CVE-2026-102772

  CMB2 <= 2.13.1 - Unauthenticated Stored Cross-Site Scripting via 'textarea_code' Field

  jtsternberg · CMB2

  High7.2
• CVE-2026-97336

  CMB2 <= 2.13.0 - Unauthenticated Stored Cross-Site Scripting via 'file_list' Field Type

  jtsternberg · CMB2

  High7.2
• CVE-2024-13895

  Code Snippets CPT <= 2.1.0 - Authenticated (Subscriber+) Arbitrary Shortcode Execution

  jtsternberg · Code Snippets CPT

  Medium4.3
• CVE-2024-1792

  CMB2 <= 2.10.1 - Authenticated (Contributor+) PHP Object Injection

  jtsternberg · CMB2

  High7.5