ThemeRuby
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Easy Post Submission | 2 | – | Mar 5, 2026 |
| Easy Post Submission – Frontend Posting, Guest Publishing & Submit Content for WordPress | 1 | – | Aug 5, 2026 |
| ThemeRuby Multi Authors – Assign Multiple Writers to Posts | 1 | – | Jan 24, 2026 |
Exploited and recent CVEs
- CVE-2026-4431 Easy Post Submission <= 2.3.0 - Missing Authorization 0.6%
- CVE-2026-22479 WordPress Easy Post Submission plugin <= 2.4.0 - Broken Access Control vulnerability 0.4%
- CVE-2026-1097 ThemeRuby Multi Authors <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'before' and 'after' Shortcode Attributes 0.3%
- CVE-2025-62062 WordPress Easy Post Submission plugin <= 1.7.0 - Sensitive Data Exposure vulnerability 0.2%