JT
Vendor
jtsternberg
4
CVEs
0
On KEV
3
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-116761 New | CM CMB2 jtsternberg | 5.4 | Oct 28 | CMB2 <= 2.13.4 - Unauthenticated Stored Cross-Site Scripting via Grouped WYSIWYG Field via Front-End Form |
| CVE-2026-102772 | CM CMB2 jtsternberg | 7.2 | Oct 2 | CMB2 <= 2.13.1 - Unauthenticated Stored Cross-Site Scripting via 'textarea_code' Field |
| CVE-2026-97336 | CM CMB2 jtsternberg | 7.2 | Oct 2 | CMB2 <= 2.13.0 - Unauthenticated Stored Cross-Site Scripting via 'file_list' Field Type |
| CVE-2024-13895 | CS Code Snippets Cpt Jtsternberg | 6.3 | Mar 8 | The The Code Snippets CPT plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.1.0 |
