CVE-2026-111396
HighCVSS 7.1Summary
The Advanced Post Manager plugin (Liquid Web / StellarWP) contains a Missing Authorization vulnerability, allowing exploitation of incorrectly configured access control security levels. This issue affects versions from n/a through 4.5.6.
Risk Assessment
An unauthorized user can access functions or data they should not have access to, potentially leading to content modification.
Recommendation
Update the Advanced Post Manager plugin to a version newer than 4.5.6 that contains the fix.
Other vulnerabilities in Advanced Post Manager
Original NVD description (English source)
Missing Authorization vulnerability in Liquid Web / StellarWP Advanced Post Manager advanced-post-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Post Manager: from n/a through 4.5.6.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS