Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: MB Custom Post Types & Custom Taxonomies 2.12.3 Clear all filters
TI-2026-79198 CVE-2026-110011 · GHSA-r9xx-rhcx-ph2x

Missing capability check in MB Custom Post Types export feature

Priority LOW 13

The MB Custom Post Types & Custom Taxonomies WordPress plugin before 2.12.3 does not perform a capability check in its export feature, allowing users with a role as low as Contributor to read the configuration of admin-o…

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00245 Published 2026-10-22 Fixed in 2.12.3 CWE-863
TI-2026-79197 CVE-2026-110010 · GHSA-95fw-7pmc-68c4

Missing authorization in MB Custom Post Types & Custom Taxonomies

Priority LOW 21

The MB Custom Post Types & Custom Taxonomies WordPress plugin before 2.12.3 does not perform any capability or authentication check before allowing an unauthenticated request to re-run a legacy data migration, letting an…

CVSS 3.1MEDIUM 4.8 Network No auth No interaction EPSS 0.00211 Published 2026-10-22 Fixed in 2.12.3 CWE-862