Known vulnerabilities in Unknown CMB2
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-80338 | The CMB2 WordPress plugin before 2.13.0 does not perform any capability check on one of its AJAX actions, allowing users… | 6.8 Medium | Sep 24, 2026 |