WordPress - Easy Post Submission – Frontend Posting, Guest Publishing & Submit Content For WordPress - CRITICAL - CVE-2026-4431. The Easy Post Submission plugin for WordPress is susceptible to unauthorized data modification due to a lack of capability checks on the `create_post()` function. This vulnerability is triggered when the `rbsm_submit_post` AJAX action is made available to unauthenticated users via `wp_ajax_nopriv_rbsm_submit_post`, allowing them to modify post attributes such as title, content, and categories by supplying a `postId` parameter. Attackers can also change the post’s status to draft, effectively unpublishing the content, thus posing significant risks to website integrity.