WordPress security by component

CMB2

Plugin description

CMB2 is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Apr 09, 2024; the highest CVE/CNA score is 7.5.

Plugin slug: cmb2

Latest vulnerability

CVE-2024-1792: CMB2: Code execution

CMB2 is affected by code execution. Exploitation requires an authenticated WordPress account. Successful exploitation can run attacker-controlled code in the WordPress hosting account.

PublishedApr 09, 2024

Safe version guidanceSee mitigation notes

		Safe version
Apr 09, 2024	CVE-2024-1792 CMB2: Code execution CMB2 is affected by code execution. Exploitation requires an authenticated WordPress account. Successful exploitation can run attacker-controlled code in the WordPress hosting account.	See mitigation notes	CVE7.5 NVDPending