CVE-2024-10078

MEDIUM EPSS 31.8%

Published Oct 18, 20241y ago · Modified Jun 17, 20261w ago

6.3 CVSS 3.1

Medium

Published Oct 18, 2024 1y ago

Last Modified Jun 17, 2026 1w ago

Description

The WP Easy Post Types plugin for WordPress is vulnerable to unauthorized access, modification, and loss of data due to a missing capability check on multiple functions in all versions up to, and including, 1.4.4. This makes it possible for authenticated attackers, with subscriber-level access and above, to add, modify, or delete plugin options and posts.

CVSS Details

Base Score

6.3

Exploitability

2.8

Impact

3.4

Vector string

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Attack Vector Network

Attack Complexity Low

Privileges Required Low

User Interaction None

Scope Unchanged

Confidentiality Low

Integrity Low

Availability Low

Threat Intelligence

EPSS Exploit Probability

31.8% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 1

CWE-862 Missing Authorization Authorization

Affected Products 1

Vendor	Product	Version	Range
newsignature	wp_easy_post_types	*	≤1.4.4

References 25

plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L111

Product
plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L112

Product
plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L113

Product
plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L114

Product
plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L115

Product
plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L116

Product
plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L117

Product
plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L118

Product
plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L119

Product
plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L120

Product
plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L121

Product
plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L122

Product
plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L123

Product
plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L124

Product
plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L125

Product
plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L126

Product
plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L127

Product
plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L128

Product
plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L129

Product
plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L130

Product
plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L131

Product
plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L132

Product
plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L133

Product
plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/easy-post-types/tags/1.4.4/custom-type.php#L134

Product
wordfence.com https://www.wordfence.com/threat-intel/vulnerabilities/id/d12c4b1c-23d0-430f-a6ea-0a3ab487ed10?source=cve

Third Party Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.