Search vulnerabilities

Results 1

Export CSV
CVE-2026-110132

Sync Post With Other Site 1.9.3 - Contributor+ Arbitrary Custom Post Type Creation and Modification

The Sync Post With Other Site WordPress plugin before 1.9.4 does not properly authorize a content-management action for post types other than pages, allowing users with Contributor-level access or above to create and modify arbitrary custom post types, including reassigning content authorship.

CVSS 3.1 · 4.9 Medium EPSS < 1% KEV · Not listed