Vulnerabilities

  

CVE-2026-99179 | Linux Kernel up to 6.18.58/7.2.12 watch_queue watch_queue.c post_one_notification null pointer dereference

A vulnerability has been found in Linux Kernel up to 6.18.58/7.2.12 and classified as problematic. This affects the function post_one_notification

  

CVE-2026-99180 | Linux Kernel up to 6.18.58/7.2.12 Unicode shmem_parse_opt_casefold.isra.0 utf8_casefold_hash s_encoding use after free

A vulnerability was found in Linux Kernel up to 6.18.58/7.2.12 and classified as very critical. This impacts the function utf8_casefold_hash

  

CVE-2026-99181 | Linux Kernel up to 6.18.58/7.2.12 autofs autofs_notify_daemon race condition

A vulnerability was found in Linux Kernel up to 6.18.58/7.2.12. It has been classified as problematic. Affected is the function

  

CVE-2026-99184 | Linux Kernel up to 6.18.58/7.2.12 accel/rocket rocket_devfreq.c rocket_remove allocation of resources

A vulnerability was found in Linux Kernel up to 6.18.58/7.2.12. It has been declared as critical. Affected by this vulnerability

  

CVE-2026-99190 | Linux Kernel up to 6.18.58/7.2.12 gpiolib gpiod_set_array_value_complex memory leak

A vulnerability was found in Linux Kernel up to 6.18.58/7.2.12. It has been rated as critical. Affected by this issue

  

CVE-2026-99189 | Linux Kernel up to 6.18.58/7.2.12 GPIO mxc_update_irq_chained_handler use after free

A vulnerability categorized as very critical has been discovered in Linux Kernel up to 6.18.58/7.2.12. This affects the function mxc_update_irq_chained_handler

  

CVE-2026-99185 | Linux Kernel up to 7.2.12 firewire fw_core_handle_response use after free

A vulnerability identified as very critical has been detected in Linux Kernel up to 7.2.12. This vulnerability affects the function

  

CVE-2026-99182 | Linux Kernel up to 6.18.58/7.2.12 ipc4-topology ipc4-topology.c ch_count integer overflow

A vulnerability labeled as very critical has been found in Linux Kernel up to 6.18.58/7.2.12. This issue affects some unknown

  

CVE-2026-99203 | Linux Kernel up to 6.18.58/7.2.12 Pipe pipe_fasync use after free

A vulnerability marked as very critical has been reported in Linux Kernel up to 6.18.58/7.2.12. Impacted is the function pipe_fasync

  

CVE-2026-99210 | Linux Kernel up to 6.18.58/7.2.12 Rocket drivers/staging/rocket.c rocket_probe null pointer dereference

A vulnerability described as very critical has been identified in Linux Kernel up to 6.18.58/7.2.12. The affected element is the

  

CVE-2026-99215 | Linux Kernel up to 6.18.58/7.2.12 Power Supply Core power_supply_unregister use after free

A vulnerability classified as very critical has been found in Linux Kernel up to 6.18.58/7.2.12. The impacted element is the

  

CVE-2026-99205 | Linux Kernel up to 7.2.12 sched/core sched_change_end race condition

A vulnerability classified as problematic was found in Linux Kernel up to 7.2.12. This affects the function sched_change_end of the

  

CVE-2026-99191 | Linux Kernel up to 6.18.58/7.2.12 Calipso calipso_skbuff_setattr integer overflow

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.18.58/7.2.12. This impacts the function

  

CVE-2026-99186 | Linux Kernel up to 7.2.12 x86/insn-eval get_seg_reg_override_idx infinite loop

A vulnerability, which was classified as very critical, was found in Linux Kernel up to 7.2.12. Affected is the function

  

CVE-2026-116855 | wphocus My auctions allegro Plugin up to 4.0.3 on WordPress missing authentication

A vulnerability has been found in wphocus My auctions allegro Plugin up to 4.0.3 on WordPress and classified as critical.

  

CVE-2026-118485 | Axel up to 2.17.14 URL Parser http_decode path traversal

A vulnerability was found in Axel up to 2.17.14 and classified as problematic. Affected by this issue is the function

  

CVE-2026-110540 | Dell PowerProtect Data Domain Management Center up to 8.6.1.20 missing authentication

A vulnerability was found in Dell PowerProtect Data Domain Management Center up to 7.7.1.0/8.8/7.13.1.80/8.3.1.40/8.6.1.20. It has been classified as problematic.

  

CVE-2026-103792 | Dell PowerProtect Data Domain Management Center sql injection

A vulnerability was found in Dell PowerProtect Data Domain Management Center. It has been declared as critical. This vulnerability affects

  

CVE-2026-101273 | pretix Payments up to 2026.6.3/2026.7.2/2026.8.0 API endpoint privileges management

A vulnerability was found in pretix Payments up to 2026.6.3/2026.7.2/2026.8.0. It has been rated as critical. This issue affects some

  

CVE-2026-101274 | pretix up to 2026.6.3/2026.7.2/2026.8.0 SSO Client response_type improper authorization

A vulnerability categorized as critical has been discovered in pretix up to 2026.6.3/2026.7.2/2026.8.0. Impacted is an unknown function of the

  

CVE-2026-114278 | Eclipse Che up to 7.122.0 che-machine-exec username/namespace os command injection

A vulnerability identified as critical has been detected in Eclipse Che up to 7.122.0. The affected element is an unknown

  

CVE-2026-102790 | icagenda Extension up to 4.0.16 Custom Field cross site scripting

A vulnerability labeled as problematic has been found in icagenda Extension up to 4.0.16. The impacted element is an unknown

  

CVE-2026-102799 | iCagenda Extension up to 3.5.0/4.0.16 Registrations Export code injection

A vulnerability marked as critical has been reported in iCagenda Extension up to 3.5.0/4.0.16. This affects an unknown function of

  

CVE-2026-81472 | Dell iDRAC Service Module for Windows prior 6.1.1.0 code injection

A vulnerability described as critical has been identified in Dell iDRAC Service Module for Windows, iDRAC Service Module for Linux

  

CVE-2026-90723 | Dell PowerProtect Data Domain Management Center up to 8.6.1.20 sql injection

A vulnerability described as problematic has been identified in Dell PowerProtect Data Domain Management Center up to 7.7.1.0/8.8/7.13.1.80/8.3.1.40/8.6.1.20. This vulnerability

  

CVE-2026-90724 | Dell PowerProtect Data Domain Management Center up to 8.8 sql injection

A vulnerability classified as problematic has been found in Dell PowerProtect Data Domain Management Center up to 8.8. This issue

  

CVE-2026-90719 | Dell PowerProtect Data Domain Management Center up to 8.8 sql injection

A vulnerability classified as problematic was found in Dell PowerProtect Data Domain Management Center up to 8.8. Impacted is an

  

CVE-2026-90720 | Dell PowerProtect Data Domain up to 8.8 integrity check

A vulnerability, which was classified as very critical, has been found in Dell PowerProtect Data Domain up to 8.8. The

  

CVE-2026-90721 | Dell PowerProtect Data Domain up to 8.6.1.20 path traversal

A vulnerability, which was classified as very critical, was found in Dell PowerProtect Data Domain up to 7.7.1.0/8.8/7.13.1.80/8.3.1.40/8.6.1.20. The impacted

  

CVE-2026-86400 | Dell PowerProtect Data Domain improper authentication

A vulnerability has been found in Dell PowerProtect Data Domain 7.7.1.0-8.8/7.13.1.0-7.13.1.80/8.3.1.0-8.3.1.40/8.6.1.0-8.6.1.20 and classified as very critical. This affects an unknown

  

CVE-2026-16020 | Fazile BACAK DefterAsist Financial Advisor Platform up to 2026-10-27 cross site scripting

A vulnerability was found in Fazile BACAK DefterAsist Financial Advisor Platform up to 2026-10-27 and classified as problematic. This impacts

  

CVE-2026-86401 | Dell PowerProtect Data Domain Management Center up to 8.8 sql injection

A vulnerability was found in Dell PowerProtect Data Domain Management Center up to 8.8. It has been classified as problematic.

  

CVE-2026-90717 | Dell PowerProtect Data Domain Management Center up to 8.8 privileges management

A vulnerability was found in Dell PowerProtect Data Domain Management Center up to 8.8. It has been declared as very

  

CVE-2026-86398 | Dell PowerProtect Data Domain up to 8.8 path traversal

A vulnerability was found in Dell PowerProtect Data Domain up to 8.8. It has been rated as very critical. Affected

  

CVE-2026-86395 | Dell PowerProtect Data Domain Virtual Edition up to 8.8 os command injection

A vulnerability categorized as very critical has been discovered in Dell PowerProtect Data Domain Virtual Edition up to 8.8. This

  

CVE-2026-86396 | Dell PowerProtect Data Domain up to 8.6.1.20 os command injection

A vulnerability identified as very critical has been detected in Dell PowerProtect Data Domain up to 7.7.1.0/8.8/7.13.1.80/8.3.1.40/8.6.1.20. This vulnerability affects

  

CVE-2026-86397 | Dell PowerProtect Data Domain up to 8.6.1.20 improper authentication

A vulnerability labeled as very critical has been found in Dell PowerProtect Data Domain up to 7.7.1.0/8.8/7.13.1.80/8.3.1.40/8.6.1.20. This issue affects

  

CVE-2026-86399 | Dell PowerProtect Data Domain up to 8.8 os command injection

A vulnerability marked as very critical has been reported in Dell PowerProtect Data Domain up to 8.8. Impacted is an

  

CVE-2026-86392 | Dell PowerProtect Data Domain up to 8.6.1.20 heap-based overflow

A vulnerability described as problematic has been identified in Dell PowerProtect Data Domain up to 7.7.1.0/8.8/7.13.1.80/8.3.1.40/8.6.1.20. The affected element is

  

CVE-2026-14571 | Futurum Software User Authentication Module sql injection

A vulnerability classified as critical has been found in Futurum Software User Authentication Module. The impacted element is an unknown

  

CVE-2026-86393 | Dell PowerProtect Data Domain up to 8.6.1.20 privileges management

A vulnerability classified as very critical was found in Dell PowerProtect Data Domain up to 7.7.1.0/8.8/7.13.1.80/8.3.1.40/8.6.1.20. This affects an unknown

  

CVE-2026-86394 | Dell PowerProtect Data Domain up to 8.8 os command injection

A vulnerability, which was classified as very critical, has been found in Dell PowerProtect Data Domain up to 8.8. This

  

CVE-2026-92665 | Dell PowerProtect Data Domain up to 8.8 allocation of resources

A vulnerability, which was classified as critical, was found in Dell PowerProtect Data Domain up to 8.8. Affected is an

  

CVE-2026-105457 | HAVELSAN Liman MYS 2.1.1/2.3.1/2.3.4-1124/2.3.5-1131 path traversal

A vulnerability has been found in HAVELSAN Liman MYS 2.1.1/2.3.1/2.3.4-1124/2.3.5-1131 and classified as problematic. Affected by this vulnerability is an

  

CVE-2026-86389 | Dell PowerProtect Data Domain up to 8.8 integer overflow

A vulnerability was found in Dell PowerProtect Data Domain up to 8.8 and classified as very critical. Affected by this

  

CVE-2026-86390 | Dell PowerProtect Data Domain up to 8.8 improper authorization

A vulnerability was found in Dell PowerProtect Data Domain up to 8.8. It has been classified as problematic. This affects

  

CVE-2026-86391 | Dell PowerProtect Data Domain Management Center up to 8.8 improper authentication

A vulnerability was found in Dell PowerProtect Data Domain Management Center up to 8.8. It has been declared as very

  

CVE-2026-86383 | Dell PowerProtect Data Domain up to 8.8 path traversal

A vulnerability was found in Dell PowerProtect Data Domain up to 8.8. It has been rated as problematic. This issue

  

CVE-2026-86384 | Dell PowerProtect Data Domain up to 8.6.1.20 hard-coded key

A vulnerability categorized as very critical has been discovered in Dell PowerProtect Data Domain up to 7.7.1.0/8.8/7.13.1.80/8.3.1.40/8.6.1.20. Impacted is an

  

CVE-2026-86386 | Dell PowerProtect Data Domain Management Center up to 8.6.1.20 sql injection

A vulnerability identified as critical has been detected in Dell PowerProtect Data Domain Management Center up to 7.7.1.0/8.8/7.13.1.80/8.3.1.40/8.6.1.20. The affected

  

CVE-2026-86388 | Dell PowerProtect Data Domain up to 8.6.1.20 path traversal

A vulnerability labeled as very critical has been found in Dell PowerProtect Data Domain up to 7.7.1.0/8.8/7.13.1.80/8.3.1.40/8.6.1.20. The impacted element

  

CVE-2026-86385 | Dell PowerProtect Data Domain 7.7.1.0-8.8 privileges management

A vulnerability marked as very critical has been reported in Dell PowerProtect Data Domain 7.7.1.0-8.8. This affects an unknown function.

  

CVE-2026-86379 | Dell PowerProtect Data Domain Management Center up to 8.8 os command injection

A vulnerability described as very critical has been identified in Dell PowerProtect Data Domain Management Center up to 8.8. This

  

CVE-2026-86380 | Dell PowerProtect Data Domain integer overflow

A vulnerability classified as very critical has been found in Dell PowerProtect Data Domain 7.7.1.0-8.8/7.13.1.0-7.13.1.80/8.3.1.0-8.3.1.40/8.6.1.0-8.6.1.20. Affected is an unknown function.

  

CVE-2026-85655 | ShortPixel Enable Media Replace Plugin up to 4.2.2 on WordPress Capability Check doReplaceQuery authorization

A vulnerability categorized as problematic has been discovered in ShortPixel Enable Media Replace Plugin up to 4.2.2 on WordPress. Affected

  

CVE-2026-118435 | Samsung escargot out-of-bounds write (09db346)

A vulnerability identified as critical has been detected in Samsung escargot. Affected by this vulnerability is an unknown functionality. Performing

  

CVE-2026-92797 | MemberPress Plugin up to 1.14.1 on WordPress save_profile_fields nonce cross-site request forgery

A vulnerability labeled as problematic has been found in MemberPress Plugin up to 1.14.1 on WordPress. Affected by this issue

  

CVE-2026-101935 | EchoPlugins Echo Knowledge Base Plugin up to 17.214.0 on WordPress Configuration Preview fe_preview_config new_kb_config cross site scripting

A vulnerability marked as problematic has been reported in EchoPlugins Echo Knowledge Base Plugin up to 17.214.0 on WordPress. This

  

CVE-2026-113487 | GeoDirectory Plugin up to 2.8.195 on WordPress Post Badge Link cross site scripting

A vulnerability, which was classified as problematic, has been found in GeoDirectory Plugin up to 2.8.195 on WordPress. Impacted is

  

CVE-2026-115255 | WP Roster Plugin up to 2.34 on WordPress AJAX Actions access control

A vulnerability, which was classified as critical, was found in WP Roster Plugin up to 2.34 on WordPress. The affected

  

CVE-2026-113488 | GeoDirectory Plugin up to 2.8.195 on WordPress Shortcode cross site scripting

A vulnerability has been found in GeoDirectory Plugin up to 2.8.195 on WordPress and classified as problematic. The impacted element

  

CVE-2026-115225 | Customer Engagement System Plugin up to 2.0.1 on WordPress server-side request forgery

A vulnerability was found in Customer Engagement System Plugin up to 2.0.1 on WordPress and classified as problematic. This affects

  

CVE-2026-115281 | Recipe Card Blocks Lite Plugin up to 3.6.3 on WordPress Shortcode sql injection

A vulnerability was found in Recipe Card Blocks Lite Plugin up to 3.6.3 on WordPress. It has been classified as

  

CVE-2026-109218 | kleor Contact Manager Plugin up to 9.1.2 on WordPress Extension Derivation Routine add_message unrestricted upload

A vulnerability was found in kleor Contact Manager Plugin up to 9.1.2 on WordPress. It has been declared as critical.

  

CVE-2026-111213 | magepeopleteam Travelly Plugin up to 2.3.6 on WordPress TTBM_Admin.php authorization

A vulnerability was found in magepeopleteam Travelly Plugin up to 2.3.6 on WordPress. It has been rated as critical. Affected

  

CVE-2026-109384 | melograno The Innovative Form Builder Plugin up to 1.5.1 on WordPress Allowed-Extensions Sanitizer submission filterFiletypeAndExt unrestricted upload

A vulnerability categorized as problematic has been discovered in melograno The Innovative Form Builder Plugin up to 1.5.1 on WordPress.

  

CVE-2026-110185 | BitPress Bit Flows Plugin up to 1.31.0 on WordPress ImageHelper image file inclusion

A vulnerability identified as problematic has been detected in BitPress Bit Flows Plugin up to 1.31.0 on WordPress. This affects

  

CVE-2026-109972 | clavaque s2Member Plugin up to 261011 on WordPress shortcode wp_kses_post date_format cross site scripting (ID 261011)

A vulnerability described as problematic has been identified in clavaque s2Member Plugin up to 261011 on WordPress. Impacted is the

  

CVE-2026-110662 | MxChat Plugin up to 3.2.25 on WordPress Transcripts page admin-ajax.php feedback cross site scripting

A vulnerability classified as problematic has been found in MxChat Plugin up to 3.2.25 on WordPress. The affected element is

  

CVE-2026-110020 | Widgetpack Rich Showcase for Google Reviews Plugin up to 7.1.6 on WordPress authorization

A vulnerability classified as critical was found in Widgetpack Rich Showcase for Google Reviews Plugin up to 7.1.6 on WordPress.

  

CVE-2026-2839 | hwk-fr Advanced Custom Fields Extended Plugin up to 0.9.2.7 on WordPress AJAX handler acf_verify_ajax acf_nonce improper authorization

A vulnerability, which was classified as critical, has been found in hwk-fr Advanced Custom Fields Extended Plugin up to 0.9.2.7

  

CVE-2026-76005 | chuck1982 WP Inventory Manager Plugin up to 2.5.5 on WordPress Shortcode sort_order sql injection

A vulnerability, which was classified as critical, was found in chuck1982 WP Inventory Manager Plugin up to 2.5.5 on WordPress.

  

CVE-2026-104743 | Tainacan Plugin up to 1.3.0 on WordPress Importer fopen/fgetcsv tmp_file path traversal

A vulnerability has been found in Tainacan Plugin up to 1.3.0 on WordPress and classified as problematic. Affected is the

  

CVE-2026-116750 | e4jvikwp VikRentCar Car Rental Management System Plugin up to 1.4.10 on WordPress REST API catid sql injection

A vulnerability was found in e4jvikwp VikRentCar Car Rental Management System Plugin up to 1.4.10 on WordPress and classified as

  

CVE-2026-76058 | odefranca PayPal Brasil para WooCommerce Plugin up to 1.7.8 on WordPress authorization

A vulnerability was found in odefranca PayPal Brasil para WooCommerce Plugin up to 1.7.8 on WordPress. It has been classified

  

CVE-2026-109980 | barrykooij Related Posts Plugin up to 3.0.0 on WordPress rp4wp_view information disclosure

A vulnerability was found in barrykooij Related Posts Plugin up to 3.0.0 on WordPress. It has been declared as problematic.

  

CVE-2026-109979 | barrykooij Related Posts Plugin up to 3.0.0 on WordPress Link Management LinkRepository::insert rp4wp_create_link information disclosure

A vulnerability categorized as problematic has been discovered in barrykooij Related Posts Plugin up to 3.0.0 on WordPress. This issue

  

CVE-2026-109381 | Magepeopleteam Mage Eventpress Plugin up to 5.7.8 on WordPress mep_grant_shop_manager_access page privileges management

A vulnerability was found in Magepeopleteam Mage Eventpress Plugin up to 5.7.8 on WordPress. It has been rated as problematic.

  

CVE-2026-116610 | hornero Clean Login Plugin up to 1.20.1 on WordPress Shortcode get_pages_with_shortcodes authorization

A vulnerability identified as problematic has been detected in hornero Clean Login Plugin up to 1.20.1 on WordPress. Impacted is

  

CVE-2026-76780 | rankingcoach Beyondseo Plugin up to 1.3.6 on WordPress REST Endpoint defineCapabilities privileges management

A vulnerability labeled as problematic has been found in rankingcoach Beyondseo Plugin up to 1.3.6 on WordPress. The affected element

  

CVE-2026-109978 | Cozythemes Cozy Blocks Plugin up to 2.2.27 on WordPress productRating.iconColor cross site scripting

A vulnerability marked as problematic has been reported in Cozythemes Cozy Blocks Plugin up to 2.2.27 on WordPress. The impacted

  

CVE-2026-111111 | bdthemes Prime Slider Plugin up to 4.7.2 on WordPress comment cross site scripting

A vulnerability described as problematic has been identified in bdthemes Prime Slider Plugin up to 4.7.2 on WordPress. This affects

  

CVE-2026-109370 | bplugins Document Embedder Plugin up to 2.4.0 on WordPress Ajax Fallback Path can_read_document content/docId cross site scripting

A vulnerability classified as problematic has been found in bplugins Document Embedder Plugin up to 2.4.0 on WordPress. This impacts

  

CVE-2026-109988 | acowebs Product Addons for Woocommerce Plugin up to 3.1.8 on WordPress fields[section][fields][row][col][type] cross site scripting

A vulnerability classified as problematic was found in acowebs Product Addons for Woocommerce Plugin up to 3.1.8 on WordPress. Affected

  

CVE-2026-111372 | QuantumCloud AI ChatBot for WooCommerce Plugin up to 5.0.0 on WordPress API call authorization

A vulnerability, which was classified as problematic, has been found in QuantumCloud AI ChatBot for WooCommerce Plugin up to 5.0.0

  

CVE-2026-111068 | DesignSetGo Plugin up to 2.11.0 on WordPress build_group_block tagName cross site scripting

A vulnerability, which was classified as problematic, was found in DesignSetGo Plugin up to 2.11.0 on WordPress. Affected by this

  

CVE-2026-77188 | xootix Waitlist Woocommerce Plugin up to 2.9.1 on WordPress Shortcode type cross site scripting

A vulnerability has been found in xootix Waitlist Woocommerce Plugin up to 2.9.1 on WordPress and classified as problematic. This

  

CVE-2026-103996 | If-So Dynamic Content Plugin up to 1.10.2 on WordPress Shortcode url cross site scripting

A vulnerability was found in If-So Dynamic Content Plugin up to 1.10.2 on WordPress and classified as problematic. This vulnerability

  

CVE-2026-104729 | meFusion Avada Builder Plugin up to 3.16.2 on WordPress Shortcode Attribute tab_index/empty_notice cross site scripting

A vulnerability was found in meFusion Avada Builder Plugin up to 3.16.2 on WordPress. It has been classified as problematic.

  

CVE-2026-107710 | WPMU DEV Hustle Plugin up to 7.8.14.3 on WordPress content[title] cross site scripting

A vulnerability was found in WPMU DEV Hustle Plugin up to 7.8.14.3 on WordPress. It has been declared as problematic.

  

CVE-2026-104740 | If-So Dynamic Content Plugin up to 1.10.2 on WordPress conversion cross site scripting

A vulnerability was found in If-So Dynamic Content Plugin up to 1.10.2 on WordPress. It has been rated as problematic.

  

CVE-2026-108366 | wpdevteam Easy Jobs Plugin up to 2.8.2 on WordPress Job List Block icon cross site scripting

A vulnerability categorized as problematic has been discovered in wpdevteam Easy Jobs Plugin up to 2.8.2 on WordPress. The impacted

  

CVE-2026-109590 | magepeopleteam Tour Booking Manager Plugin up to 2.3.6 on WordPress Shortcode Attributes ttbm_hotel_map_shortcode width/height/zoom cross site scripting

A vulnerability identified as problematic has been detected in magepeopleteam Tour Booking Manager Plugin up to 2.3.6 on WordPress. This

  

CVE-2026-109975 | Cozymes Cozy Blocks Plugin up to 2.2.27 on WordPress Block Attribute icon.view/icon.layout/icon.gap cross site scripting

A vulnerability labeled as problematic has been found in Cozymes Cozy Blocks Plugin up to 2.2.27 on WordPress. This impacts

  

CVE-2026-109385 | Posimythmes UiChemy Plugin up to 5.3.0 on WordPress cross site scripting

A vulnerability marked as problematic has been reported in Posimythmes UiChemy Plugin up to 5.3.0 on WordPress. Affected is an

  

CVE-2026-110071 | Mang Board Plugin up to 2.4.5 on WordPress Shortcode align cross site scripting

A vulnerability described as problematic has been identified in Mang Board Plugin up to 2.4.5 on WordPress. Affected by this

  

CVE-2026-118164 | ifso If-So Dynamic Content Plugin up to 1.10.2 on WordPress repeater[*][version_uid] cross site scripting

A vulnerability classified as problematic has been found in ifso If-So Dynamic Content Plugin up to 1.10.2 on WordPress. Affected

  

CVE-2026-116761 | jtsternberg CMB2 Plugin up to 2.13.4 on WordPress Wysiwyg Field cmb43ex1_grp[0][txt] cross site scripting

A vulnerability classified as problematic was found in jtsternberg CMB2 Plugin up to 2.13.4 on WordPress. This affects an unknown