WordPress CVEs

Description

The WP Easy Post Types plugin for WordPress is vulnerable to unauthorized access, modification, and loss of data due to a missing capability check on multiple functions in all versions up to, and including, 1.4.4. This makes it possible for authenticated attackers, with subscriber-level access and above, to add, modify, or delete plugin options and posts.

Affected WordPress components

• easy-post-types Plugin · easy-post-types
  Confirmed match Homeless
  Up to and including 1.4.4
  View on WordPress.org

A confirmed match is backed by the plugin or theme slug. A possible match is based on the product name only and should be verified.

Affected products and versions

• chertz WP Easy Post Types — Up to and including 1.4.4
• wp_easy_post_types_project wp_easy_post_types — Up to and including 1.4.4
• newsignature wp_easy_post_types — Up to and including 1.4.4

References

• plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L111 Product
• plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L112 Product
• plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L113 Product
• plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L114 Product
• plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L115 Product
• plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L116 Product
• plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L117 Product
• plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L118 Product
• plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L119 Product
• plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L120 Product
• plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L121 Product
• plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L122 Product
• plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L123 Product
• plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L124 Product
• plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L125 Product
• plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L126 Product
• plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L127 Product
• plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L128 Product
• plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L129 Product
• plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L130 Product
• plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L131 Product
• plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L132 Product
• plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L133 Product
• plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L134 Product
• www.wordfence.com https://www.wordfence.com/threat-intel/vulnerabilities/id/d12c4b1c-23d0-430f-a6ea-0a3ab487ed10?source=cve Third Party Advisory
• nvd.nist.gov Official NVD record