CyberSecBulletin

ThemeRuby vulnerabilities

We track 2 vulnerabilities in ThemeRuby products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 5, 2026.

2vulnerabilities
1critical
1high
0exploited
8.3average CVSS score

Latest ThemeRuby vulnerabilities

  • 9.1 Critical severity

    Easy Post Submission – Frontend Posting, Guest…: Missing Authorization

    CVE-2026-4431ThemeRuby

    The Easy Post Submission plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the `create_post()` function in all versions up to, and including, 2.3.0. This is due to the `rbsm_submit_post` AJAX action be

  • 7.5 High severity

    Easy Post Submission: Missing Authorization

    CVE-2026-22479ThemeRuby

    Missing Authorization vulnerability in ThemeRuby Easy Post Submission easy-post-submission allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Post Submission: from n/a through <= 2.4.0.