CVE-2026-111396: WordPress Advanced Post Manager plugin <= 4.5.6 - Broken Access Control vulnerability
Missing Authorization vulnerability in Liquid Web / StellarWP Advanced Post Manager advanced-post-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Post Manager: from n/a through 4.5.6.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress Advanced Post Managerto a version that resolves this vulnerability.Fixed in 4.5.7
Event History
Frequently Asked Questions
Which installations are affected?
Advanced Post Manager installations running version 4.5.6 or earlier are affected. The affected range is listed as from an unspecified initial version through 4.5.6.
What level of access does an attacker need?
An attacker needs existing low-privileged access to exploit the issue. The vulnerability is network-accessible and does not require user interaction.
What could successful exploitation do?
Successful exploitation can affect integrity and availability. No confidentiality impact is identified in the supplied severity vector.