6.4
Medium
CVE-2026-24362 Missing Authorization vulnerability in bdthemes Ultimate Post Kit ultimate-post-kit allows Exploiting Incorrectly…
Description
Missing Authorization vulnerability in bdthemes Ultimate Post Kit ultimate-post-kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultimate Post Kit: from n/a through <= 4.0.21.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Ultimate Post Kit 4.0 | earliest → 4.0.21 | No fix stated |