VulnSocial

CVE-2026-24362Disclosure

LOWCVSS 6.4 · MEDIUM

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft
  • Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

Missing Authorization vulnerability in bdthemes Ultimate Post Kit ultimate-post-kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultimate Post Kit: from n/a through <= 4.0.21.

Back to dashboard
1.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-862

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Threat summary

  • Public PoC is present in monitored signal
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • PoC mentioned or linked in 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-03-30); latest day: 1
  • 2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-03-30: 1Mentions · 2026-04-09: 1PoC Mentioned / Linked · 2026-04-09: 1Technical Details · 2026-03-30: 1Technical Details · 2026-04-09: 103-3004-09
Signal classification2 categories
Disclosure
150.0%
PoC
150.0%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-03-301
Disclosure1
2026-04-091
PoC1
Full discourse2 posts
  • Atomic Edge@atomicedgeWAF
    PoC

    https://atomicedge.io/cve-proof/cve-2026-24362-ultimate-post-kit-version-4-0-21-medium-vulnerability-proof-of-concept CVE-2026-24362 #WordPress plugin #vulnerability ultimate-post-kit #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge

    Post summary

    The message advertises a proof‑of‑concept for CVE‑2026‑24362 targeting the Ultimate Post Kit plugin, providing specific vulnerability details but no evidence of active exploitation, patch availability, or debunking.

    0000053
    6 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-24362 Missing Authorization vulnerability in bdthemes Ultimate Post Kit ultimate-post-kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue… https://www.cve.org/CVERecord?id=CVE-2026-24362

    Post summary

    The post announces CVE‑2026‑24362 as a missing authorization vulnerability in bdthemes Ultimate Post Kit that enables exploitation via incorrectly configured access control, but it offers no PoC, exploit code, patch, or evidence of active exploitation.

    0000094
    56.8K followersView on X

Explore more

Back to dashboard