Advance Guest Post vulnerabilities
We track 3 vulnerabilities in Advance Guest Post products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on November 13, 2026.
Latest Advance Guest Post vulnerabilities
- 7.5 High severity
Advance Guest Post: Missing Authorization
The Advance Guest Post WordPress plugin through 1.9 does not perform any authorization or ownership check when deleting media attachments, relying only on a nonce exposed to every site visitor, allowing unauthenticated users to permanently delete arbitrary Med
- 9.8 Critical severity
Advance Guest Post: Unrestricted Upload of File with Dangerous Type
The Advance Guest Post WordPress plugin through 1.9 does not properly restrict or validate file uploads, authorizing an upload action with a nonce exposed to every front-end visitor and checking only a file's leading bytes, allowing unauthenticated users to up
- 9.8 Critical severity
Advance Guest Post: Unrestricted Upload of File with Dangerous Type
The Advance Guest Post WordPress plugin through 1.9 does not properly validate uploaded files, relying on a case-sensitive and incomplete extension check that unauthenticated users can trivially bypass, allowing them to upload arbitrary files, including execut