Skip to content
Sign in
Not rated

CVE-2026-110132 Sync Post With Other Site 1.9.3 - Contributor+ Arbitrary Custom Post Type Creation and Modification

Description

The Sync Post With Other Site WordPress plugin before 1.9.4 does not properly authorize a content-management action for post types other than pages, allowing users with Contributor-level access or above to create and modify arbitrary custom post types, including reassigning content authorship.

Affected products and versions

Product Affected versions Fixed in
Sync Post With Other Site 1.9 1.9.3 → < 1.9.4 1.9.4

Other CVEs of Sync Post With Other Site

The 2 CVEs of Sync Post With Other Site →
CVE-2026-14923 The Sync Post With Other Site WordPress plugin before 1.9.3 does not correctly enforce the page-editing capability on… 6.5 Medium
Track this CVE