Unrated severityNVD Advisory· Published Nov 8, 2026
CVE-2026-110132
CVE-2026-110132
Description
The Sync Post With Other Site WordPress plugin before 1.9.4 does not properly authorize a content-management action for post types other than pages, allowing users with Contributor-level access or above to create and modify arbitrary custom post types, including reassigning content authorship.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <1.9.4
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.