CVE-2026-110132
Sync Post With Other Site 1.9.3 - Contributor+ Arbitrary Custom Post Type Creation and Modification
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The Sync Post With Other Site WordPress plugin before 1.9.4 does not properly authorize a content-management action for post types other than pages, allowing users with Contributor-level access or above to create and modify arbitrary custom post types, including reassigning content authorship.
| Vendor | unknown |
| Product | sync post with other site |
| Published | Nov 8, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown sync post with other site
Be the first to know when new unknown vulnerabilities affecting unknown sync post with other site are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / Sync Post With Other Site
1.9.3 < 1.9.4
References
Credits
Zulfugar Huseynli WPScan