CyberSecBulletin

CMB2 vulnerabilities

We track 1 vulnerability in CMB2 products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on April 9, 2024.

1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score

Latest CMB2 vulnerabilities

  • 7.5 High severity

    CMB2: Deserialization of Untrusted Data

    CVE-2024-1792Jtsternberg

    The CMB2 plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.10.1 via deserialization of untrusted input from the text_datetime_timestamp_timezone field. This makes it possible for authenticated attackers, with co