What is GHSA-45hq-3vxw-q94x?

GHSA-45hq-3vxw-q94x is a security advisory published by GitHub Security Advisories with Medium severity. The MB Custom Post Types \u0026 Custom Taxonomies WordPress plugin before 2.12.2 does not perform a...

Which CVE IDs does GHSA-45hq-3vxw-q94x cover?

GHSA-45hq-3vxw-q94x covers the following CVE IDs: CVE-2026-109982. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-45hq-3vxw-q94x?

GHSA-45hq-3vxw-q94x has a CVSS v3 base score of 4.2, published by GitHub Security Advisories.

GHSA-45hq-3vxw-q94xMediumCVSS 4.2

The MB Custom Post Types & Custom Taxonomies WordPress plugin before 2.12.2 does not perform a...

Vendor

GitHub Security Advisories

Published

October 16, 2026

Last Modified

October 16, 2026

🔗 CVE IDs covered (1)

CVE-2026-109982 →

📋 Description

The MB Custom Post Types & Custom Taxonomies WordPress plugin before 2.12.2 does not perform a capability check or validate a nonce on its migration actions, allowing any authenticated user, such as a subscriber, to trigger a one-way migration that creates published records and permanently deletes a companion MB Custom Post Types & Custom Taxonomies WordPress plugin before 2.12.2's entire post-type and taxonomy configuration.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-109982
https://wpscan.com/vulnerability/27787d4e-1633-4eb6-bcf4-0a8586df3d47
https://github.com/advisories/GHSA-45hq-3vxw-q94x