CVE-2026-111396: Missing Authorization in Liquid Web / StellarWP Advanced Post Manager

This vulnerability in Advanced Post Manager arises from missing authorization checks, allowing users with limited privileges to perform actions beyond their intended access. The issue affects all versions prior to 4.5.7. The CVSS vector indicates the attack can be performed remotely over the network with low attack complexity and requires low privileges but no user interaction. The impact includes integrity loss and high availability impact, but no confidentiality loss.

Exploitation of this vulnerability could allow an attacker with limited privileges to perform unauthorized modifications, impacting the integrity and availability of the affected system. There is no indication of confidentiality compromise. No known exploits are reported in the wild.

No explicit patch or remediation details are provided in the input data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is confirmed, restrict access to the plugin and monitor for suspicious activity related to access control.