Bdthemes Ultimate Post Kit vulnerabilities

2 CVEs affecting Bdthemes Ultimate Post Kit, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-105886, published 2026-10-08.

More from Bdthemes.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-105886, published 2026-10-08. Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days. Missing Authorization vulnerability in BdThemes Ultimate Post Kit ultimate-post-kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultimate Post Kit: from…
• CVE-2026-24362, published 2026-03-25. Medium severity, CVSS 6.4. EPSS: 0.2% chance of exploitation in the next 30 days. Missing Authorization vulnerability in bdthemes Ultimate Post Kit ultimate-post-kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultimate Post Kit: from…