Newsignature maintains a small portfolio of WordPress-focused plugins and modules, including WP Easy Post Types and Addressfield Tokens, that extend content management and data-handling capabilities. The vendor's observed vulnerabilities cluster around web application input handling and deserialization risks, reflected in cross-site scripting, untrusted deserialization, and missing authorization weaknesses typical of plugin-layer extensions. Current exploitation activity and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Newsignature over time
Signals from CVEs in this vendor scope (4 CVEs).
4 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2024-10079HIGH The WP Easy Post Types plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.4.4 via deserialization of untrusted input from the 'text' par | Oct 18, 2024 | 8.8 | 25 | NO | NO |
CVE-2024-10078MEDIUM The WP Easy Post Types plugin for WordPress is vulnerable to unauthorized access, modification, and loss of data due to a missing capability check on multiple functions in all vers | Oct 18, 2024 | 6.3 | 19 | NO | NO |
CVE-2024-10080MEDIUM The WP Easy Post Types plugin for WordPress is vulnerable to Stored Cross-Site Scripting via post meta in versions up to, and including, 1.4.4 due to insufficient input sanitizatio | Oct 18, 2024 | 5.4 | 16 | NO | NO |
Cross-site scripting (XSS) vulnerability in the address components field formatter in the AddressField Tokens module 7.x-1.x before 7.x-1.4 for Drupal allows remote authenticated u | Jun 2, 2014 | 3.5 | 13 | NO | NO |
Signals from CVEs in this vendor scope (4 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Newsignature.
Media articles that mention a CVE ID that affects a product developed by Newsignature — matched by CVE ID, not by vendor name.