Stats Digest Feeds
โ† Back to all CVEs

CVE-2026-110132

UNKNOWN NVD
CVSS Score 0
Severity UNKNOWN
Published Nov 08, 2026
Vendor unknown

Description

The Sync Post With Other Site WordPress plugin before 1.9.4 does not properly authorize a content-management action for post types other than pages, allowing users with Contributor-level access or above to create and modify arbitrary custom post types, including reassigning content authorship.

References