Missing Authorization Vulnerability in bdthemes Ultimate Post Kit
CVE-2026-24362

Currently unrated

Key Information:

Vendor

WordPress

Vendor
CVE Published:
25 March 2026

What is CVE-2026-24362?

The Missing Authorization vulnerability in bdthemes Ultimate Post Kit affects improperly configured access control security levels, allowing unauthorized access to sensitive features. This issue impacts versions of the Ultimate Post Kit from its initial release up to and including version 4.0.21, posing significant security risks to WordPress websites utilizing the plugin.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Affected Version(s)

Ultimate Post Kit <= n/a

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

0xd4rk5id3 | Patchstack Bug Bounty Program
.