Unauthenticated Privilege Escalation To Form-Type Confusion Via 'bf_post_type' Parameter

Vulnerability

Threat entity extracted from intelligence sources

Frequency

1

occurrences

First Seen

November 12, 2026

Last Seen

November 12, 2026

Overview

Recent Events

Related Clusters (1)

497 Vulnerabilities Disclosed in WordPress Plugins and Themes

9h ago·2 sources

Related Articles (1)

Wordfence Intelligence Weekly WordPress Vulnerability Report (November 2, 2026 to November 8, 2026)

Wordfence·2d ago

Related Entities

CWE-287 - Improper Authentication CWE-352 - Cross-Site Request Forgery (csrf)CWE-434 - Unrestricted Upload Of File With Dangerous Type CWE-79 - Cross-site Scripting (xss)CWE-89 - SQL Injection Unauthenticated Administrator Credential Exposure Unauthenticated Arbitrary File Upload Unauthenticated Remote Code Execution Unauthenticated SQL Injection Via 'email' Parameter Unauthenticated SQL Injection Via 'tag' Parameter Unauthenticated Stored Cross-Site Scripting