Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Smart Post 4.0.8 Clear all filters
TI-2026-54352 CVE-2026-78150 · GHSA-258v-5wmv-8454

Authorization bypass in Smart Post

Priority LOW 13

The Smart Post WordPress plugin before 4.0.8 does not check the type, ownership or status of the post it is asked to duplicate, allowing users with contributor privileges and above to copy any private or password protect…

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00299 Published 2026-09-05 Fixed in 4.0.8 CWE-639
TI-2026-54351 CVE-2026-78149 · GHSA-x6q5-5p66-45w5

Information disclosure in Smart Post

Priority LOW 30

The Smart Post WordPress plugin before 4.0.8 does not check whether a post is password protected before returning its content and its stored password through an unauthenticated AJAX action, allowing unauthenticated users…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00345 Published 2026-09-05 Fixed in 4.0.8 CWE-200