CVE-2026-110132 | BDVDB-2026-401839 Detail

Sync Post With Other Site

Description#

The Sync Post With Other Site WordPress plugin before 1.9.4 does not properly authorize a content-management action for post types other than pages, allowing users with Contributor-level access or above to create and modify arbitrary custom post types, including reassigning content authorship.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-863 Incorrect Authorization

References#

https://wpscan.com/vulnerability/5c68dd50-96a3-414c-8060-9f70bb87766f/

Exploit#

https://wpscan.com/vulnerability/5c68dd50-96a3-414c-8060-9f70bb87766f/

History#

Version 12026-11-08Record published in the CVE List.