CVE-2026-110011 The MB Custom Post Types & Custom Taxonomies WordPress plugin before 2.12.3 does not perform a capability check in its export feature, allow
- Exploited in the wild
- Not known
- Fix
- None listed
What is CVE-2026-110011?
CVE-2026-110011 is a low-severity vulnerability in Unknown MB Custom Post Types & Custom Taxonomies, published on 22 Oct 2026.
Official description
The MB Custom Post Types & Custom Taxonomies WordPress plugin before 2.12.3 does not perform a capability check in its export feature, allowing users with a role as low as Contributor to read the configuration of admin-only custom post types and taxonomies, as well as the titles, dates, statuses and some stored content of other users' non-public posts and pages.
Weakness: CWE-863
Which versions are affected by CVE-2026-110011?
How do I fix CVE-2026-110011?
No fix has been published for CVE-2026-110011 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-110011 being exploited?
There is no known exploitation of CVE-2026-110011 in the wild and no public exploit code.
Sources
Also known as GHSA-r9xx-rhcx-ph2x.