The ThemeRuby Easy Post Submission plugin versions up to 2.4.0 suffer from a Missing Authorization vulnerability (CVE-2026-22479) that allows attackers to bypass access controls and submit posts without proper authorization. This issue arises from incorrectly configured access control security levels in the plugin. The vulnerability is remotely exploitable without authentication or user interaction and impacts confidentiality but not integrity or availability.

Exploitation of this vulnerability could allow unauthorized users to submit posts through the Easy Post Submission plugin, potentially leading to unauthorized content publication. The CVSS score of 7.5 reflects a high severity due to the ease of remote exploitation and the confidentiality impact. There is no indication of integrity or availability impact. No known exploits have been reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix information is provided, users should monitor ThemeRuby's communications for updates. Until a fix is available, consider restricting access to the plugin's submission functionality or disabling the plugin if feasible to prevent unauthorized use.