DATABASE
日々
Photo: Rob Wingate / Unsplash
WATRIXは外部からの無料診断に加え、個別の影響調査、侵害されたサイトの復旧・再発防止のご相談を承ります。
LOADING DATABASE
脆弱性情報を読み込んでいます
ADVISORY
影響範囲、修正情報、出典と履歴を確認できます。
Photo: Rob Wingate / Unsplash
LOADING DATABASE
影響範囲と修正情報を読み込んでいます
© 2026 WATRIX合同会社. All rights reserved.
ADVISORY
掲載中修正版ありBasel Post Types
Photo: Rob Wingate / Unsplash
CVE-2026-89324
情報整理：WATRIX合同会社。影響の確定や侵害の有無は、実際の版・設定・ログ等を確認して判断します。
診断へ追加した時点の記録です。現在の照合可否は製品・バージョンの取得状況と、上記の確認範囲によります。
WATRIX GUIDE
Basel Post Typesの
Basel Post Types（Basel テーマ用の投稿タイプ追加プラグイン）のソーシャルログインの署名確認の不備で、ログインなしで管理者を含む任意のユーザーになりすませるおそれがある脆弱性（CVE-2026-89324、CVSS 9.8）です。影響を受けるのは 1.18 以下です。
WATRIXが確認した関連解説です。公開元の原典とは区別して掲載しています。
日本語解説の確認：2026/11/11
無料診断で製品とバージョンを取得できた場合に、診断ルールの影響範囲と照合します。 設定条件の追加確認が必要です。 バージョンが隠されているサイトや、侵害の有無は別途調査が必要です。
無料診断は外から確認できる範囲が対象です。個別の調査・復旧は、状況と対応範囲を確認してご案内します。
同じCVEでも、深刻度の評価や掲載状態は出典ごとに異なる場合があります。各出典の記録を残し、片方の棄却・撤回だけで他の告知の状態を書き換えません。
この出典のCVSS：9.8
この出典のCVSS：9.8
この出典のCVSS：9.8
公開元の記載です。上のWATRIXの日本語解説と併せて、最新の情報をご確認ください。
The Basel Post Types plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.18. The vulnerability exists because a missing-quotes coding error in the defined() call for SECURE_AUTH_SALT inside BASEL_Auth::get_config() causes PHP to evaluate the constant's value rather than its name, making the check always fail and permanently falling back to the static hardcoded salt 2NlBUibcszrVtNmDnxqDbwCOpLWq91eatIz6O1O that is publicly visible in the theme source code; because this salt is static and known, an attacker can compute a valid Opauth signature entirely offline and submit a forged ?opauth callback to the unauthenticated init hook endpoint processed by register_or_login. This makes it possible for unauthenticated attackers to authenticate as any existing WordPress user, including administrators, by forging a callback tied to a known target account email address — bypassing all password verification, multi-factor authentication, and ownership checks, and receiving a fully authenticated session cookie via wc_set_customer_auth_cookie(). Exploitation requires WooCommerce to be active and at least one Basel social-login provider (Facebook, Google, or VKontakte) to be configured with a valid app_id and app_secret in the theme settings.
This record contains material that is subject to copyright
Copyright 2012-2026 Defiant Inc.
Defiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.
Copyright 1999-2026 The MITRE Corporation
CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.
attribution-required
なし
当サイトが取得した原本の履歴です。公開元での過去の改訂日時とは異なります。
現在の保存内容2026/11/12 3:00
Basel Post Types <= 1.18 - Unauthenticated Authentication Bypass via Forged Opauth Callback Signature with Hardcoded Fallback Salt
This record contains material that is subject to copyright
Copyright 2012-2026 Defiant Inc.
Defiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.
Copyright 1999-2026 The MITRE Corporation
CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.
attribution-required
なし
以前の保存内容2026/11/11 3:00
Basel Post Types <= 1.18 - Unauthenticated Authentication Bypass via Forged Opauth Callback Signature with Hardcoded Fallback Salt
This record contains material that is subject to copyright
Copyright 2012-2026 Defiant Inc.
Wordfenceの改訂履歴は、当サイトでの保存開始以降が対象です。初回取得より前の版は含まれません。
このページは公表情報を確認するためのデータです。製品を使っているだけで被害や脆弱性への該当が確定するものではありません。現在のバージョン、設定条件、開発元の更新情報を確認してください。
Defiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.
Copyright 1999-2026 The MITRE Corporation
CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.
attribution-required
なし
