What is GHSA-r9xx-rhcx-ph2x?

GHSA-r9xx-rhcx-ph2x is a security advisory published by GitHub Security Advisories with Low severity. The MB Custom Post Types \u0026 Custom Taxonomies WordPress plugin before 2.12.3 does not perform a...

Which CVE IDs does GHSA-r9xx-rhcx-ph2x cover?

GHSA-r9xx-rhcx-ph2x covers the following CVE IDs: CVE-2026-110011. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-r9xx-rhcx-ph2x?

GHSA-r9xx-rhcx-ph2x has a CVSS v3 base score of 2.7, published by GitHub Security Advisories.

GHSA-r9xx-rhcx-ph2xLowCVSS 2.7

The MB Custom Post Types & Custom Taxonomies WordPress plugin before 2.12.3 does not perform a...

Vendor

GitHub Security Advisories

Published

October 22, 2026

Last Modified

October 22, 2026

🔗 CVE IDs covered (1)

CVE-2026-110011 →

📋 Description

The MB Custom Post Types & Custom Taxonomies WordPress plugin before 2.12.3 does not perform a capability check in its export feature, allowing users with a role as low as Contributor to read the configuration of admin-only custom post types and taxonomies, as well as the titles, dates, statuses and some stored content of other users' non-public posts and pages.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-110011
https://wpscan.com/vulnerability/4a9a982d-cbf7-4125-b35c-7dd8af40e745
https://github.com/advisories/GHSA-r9xx-rhcx-ph2x