CVE-2026-116761 | jtsternberg CMB2 Plugin up to 2.13.4 on WordPress Wysiwyg Field cmb43ex1_grp[0][txt] cross site scripting

October 28, 2026 Yanac

A vulnerability classified as problematic was found in jtsternberg CMB2 Plugin up to 2.13.4 on WordPress. This affects an unknown part of the component Wysiwyg Field. The manipulation of the argument cmb43ex1_grp[0][txt] results in cross site scripting.

This vulnerability is known as CVE-2026-116761. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More