Browse all 4 CVE security advisories affecting ThemeRuby. AI-powered Chinese analysis, POCs, and references for each vulnerability.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-4431 | Easy Post Submission <= 2.3.0 - Missing Authorization — Easy Post Submission – Frontend Posting, Guest Publishing & Submit Content for WordPress CWE-862 | 9.1 | Critical | 2026-08-05 |
| CVE-2026-22479 | WordPress Easy Post Submission plugin <= 2.4.0 - Broken Access Control vulnerability — Easy Post Submission CWE-862 | 7.5 | High | 2026-03-05 |
| CVE-2026-1097 | ThemeRuby Multi Authors <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'before' and 'after' Shortcode Attributes — ThemeRuby Multi Authors – Assign Multiple Writers to Posts CWE-79 | 6.4 | Medium | 2026-01-24 |
| CVE-2025-62062 | WordPress Easy Post Submission plugin <= 1.7.0 - Sensitive Data Exposure vulnerability — Easy Post Submission CWE-201 | 5.3 | Medium | 2025-10-22 |
This page lists every published CVE security advisory associated with ThemeRuby. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.