{"id":"CVE-2026-110132","published":"2026-11-08T06:17:04.557","lastModified":"2026-11-10T16:28:46.510","description":"The Sync Post With Other Site WordPress plugin before 1.9.4 does not properly authorize a content-management action for post types other than pages, allowing users with Contributor-level access or above to create and modify arbitrary custom post types, including reassigning content authorship.","cvssScore":4.9,"cvssSeverity":"MEDIUM","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N","cwes":["CWE-863"],"vendors":[],"products":[],"references":[{"url":"https://wpscan.com/vulnerability/5c68dd50-96a3-414c-8060-9f70bb87766f/","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}