Read the docs

ThemeRuby

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

ThemeRuby records in CISA KEV

No ThemeRuby vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Foxiz 1 record MEDIUM

Records

5 records

TI-2026-03843 CVE-2026-4431 · GHSA-hqvx-hxrc-x42r

Easy Post Submission <= 2.3.0 - Missing Authorization

Priority MEDIUM 46

The Easy Post Submission plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the `create_post()` function in all versions up to, and including, 2.3.0.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00618 Published 2026-08-05 No fix listed CWE-862
TI-2026-18060 CVE-2026-22479 · GHSA-x5jx-mx9w-7cpm

WordPress Easy Post Submission plugin <= 2.4.0 - Broken Access Control vulnerability

Priority LOW 39

Missing Authorization vulnerability in ThemeRuby Easy Post Submission easy-post-submission allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Post Submission: from n/a through…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00375 Published 2026-03-05 No fix listed CWE-862
TI-2026-00827 CVE-2026-1097 · GHSA-94xx-gq3f-6gw4

Cross-site scripting in ThemeRuby Multi Authors – Assign Multiple Writers to Posts

Priority LOW 28

The ThemeRuby Multi Authors – Assign Multiple Writers to Posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'before' and 'after' shortcode attributes in all versions up to, and including, 1.0…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00261 Published 2026-01-24 No fix listed CWE-79
TI-2025-38385 CVE-2025-62062 · GHSA-pmvv-55wg-g897

WordPress Easy Post Submission plugin <= 1.7.0 - Sensitive Data Exposure vulnerability

Priority LOW 23

Insertion of Sensitive Information Into Sent Data vulnerability in ThemeRuby Easy Post Submission easy-post-submission allows Retrieve Embedded Sensitive Data.This issue affects Easy Post Submission: from n/a through <=…

CVSS 3.1MEDIUM 5.3 Network High privileges No interaction EPSS 0.00194 Published 2025-10-22 No fix listed CWE-201
Open these records in search →