CVE-2026-4431

The Easy Post Submission plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the createpost function in all versions up to, and including, 2.3.0. This is due to the rbsmsubmitpost AJAX action being registered for unauthenticated users via...

PT-2026-68061

Name of the Vulnerable Software and Affected Versions Easy Post Submission versions prior to 2.3.1 Description The plugin allows unauthorized modification of data because the create post function lacks a capability check. The rbsm submit post AJAX action is registered for unauthenticated users vi...