Title: security
Last modified: March 25, 2026

---

# security

 *  Resolved [Le chef Isidore](https://wordpress.org/support/users/isidore1964/)
 * (@isidore1964)
 * [6 months, 3 weeks ago](https://wordpress.org/support/topic/security-134/)
 * Hello,
   For the past few days, I’ve been receiving a security report from Solid
   Security (known vulnerabilities: WordPress Easy Post Submission plugin <= 2.4.0–
   Broken Access Control vulnerabilityPatchstack Priority: HighManage vulnerability
   | [View in Patchstack](https://patchstack.com/database/vulnerability/easy-post-submission/wordpress-easy-post-submission-plugin-2-2-0-broken-access-control-vulnerability?_a_id=431)).
 * Please take the necessary steps,
   Isidore
 * The page I need help with: _[[log in](https://login.wordpress.org/?redirect_to=https%3A%2F%2Fwordpress.org%2Fsupport%2Ftopic%2Fsecurity-134%2F%3Foutput_format%3Dmd&locale=en_US)
   to see the link]_

Viewing 4 replies - 1 through 4 (of 4 total)

 *  Plugin Support [J Rubystudio](https://wordpress.org/support/users/rubystudio/)
 * (@rubystudio)
 * [6 months, 3 weeks ago](https://wordpress.org/support/topic/security-134/#post-18863001)
 * Thank you for flagging this.
 * The version 2.4.0 of the Easy Post Submission plugin, which includes the fix 
   for the Broken Access Control vulnerability you mentioned. The alert you’re seeing
   from Solid Security / Patchstack appears to be based on outdated patch feedback
   that hasn’t yet been updated to reflect the fix in version 2.4.
 * Please don’t hesitate to reach out if you have any other concerns.
 * Best regards
 *  Thread Starter [Le chef Isidore](https://wordpress.org/support/users/isidore1964/)
 * (@isidore1964)
 * [6 months, 3 weeks ago](https://wordpress.org/support/topic/security-134/#post-18863309)
 * Hello [@rubystudio](https://wordpress.org/support/users/rubystudio/) and thank
   you for your reply.
   Isidore
 *  Thread Starter [Le chef Isidore](https://wordpress.org/support/users/isidore1964/)
 * (@isidore1964)
 * [6 months, 2 weeks ago](https://wordpress.org/support/topic/security-134/#post-18867247)
 * Hello [@rubystudio](https://wordpress.org/support/users/rubystudio/),
 * I’m contacting you again regarding the Solid Security alert.
   I keep receiving
   the alert, and this has been happening since the 2.4.0 update, whereas previously,
   with the earlier version, I didn’t have any security alerts.
 * I think your 2.4.0 plugin needs to be updated and that any issues with it need
   to be fixed.
 * Thank you,
   Isidore
 *  Plugin Support [J Rubystudio](https://wordpress.org/support/users/rubystudio/)
 * (@rubystudio)
 * [6 months, 2 weeks ago](https://wordpress.org/support/topic/security-134/#post-18867439)
 * I understand the continued alerts from Solid Security are concerning. Let me 
   clarify what is likely happening here.
 * Security plugins like Solid Security and Patchstack maintain their own vulnerability
   databases. When a vulnerability is reported, they add it to their list and trigger
   alerts for any site running that plugin. However, even after the plugin author
   releases a fix, these databases are not always updated immediately. This means
   you may continue receiving alerts until the security service reviews and confirms
   the patch, then removes the entry from their database.
 * In other words, the alert you are seeing does not necessarily mean your site 
   is still vulnerable. It means the security service has not yet re-evaluated version
   2.4.0 to confirm the fix.
 * That said, I have already submitted the patch to Patchstack for review. However,
   they have not yet reviewed and updated their records for version 2.4.0. Once 
   they complete their review and confirm the fix, the alerts on your end should
   stop automatically.
 * In the meantime, please make sure you are running the latest version of Easy 
   Post Submission (2.4.0) and rest assured that the vulnerability has been addressed.
 * Thank you for your patience, and please let me know if you have any further questions.
 * Best regards

Viewing 4 replies - 1 through 4 (of 4 total)

 The topic ‘security’ is closed to new replies.

 * ![](https://ps.w.org/easy-post-submission/assets/icon-256x256.gif?rev=3247494)
 * [Easy Post Submission - Frontend Posting, Guest Publishing & Submit Content for WordPress](https://wordpress.org/plugins/easy-post-submission/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/easy-post-submission/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/easy-post-submission/)
 * [Active Topics](https://wordpress.org/support/plugin/easy-post-submission/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/easy-post-submission/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/easy-post-submission/reviews/)

 * 6 replies
 * 2 participants
 * Last reply from: [J Rubystudio](https://wordpress.org/support/users/rubystudio/)
 * Last activity: [6 months, 2 weeks ago](https://wordpress.org/support/topic/security-134/#post-18867439)
 * Status: resolved