CVE-2026-110132
Sync Post With Other Site 1.9.3 - Contributor+ Arbitrary Custom Post Type Creation and Modification
The Sync Post With Other Site WordPress plugin before 1.9.4 does not properly authorize a content-management action for post types other than pages, allowing users with Contributor-level access or above to create and modify arbitrary custom post types, including reassigning content authorship.
What each source reports
CVE List No score
Sync Post With Other Site 1.9.3 - Contributor+ Arbitrary Custom Post Type Creation and Modification
The Sync Post With Other Site WordPress plugin before 1.9.4 does not properly authorize a content-management action for post types other than pages, allowing users with Contributor-level access or above to create and modify arbitrary custom post types, including reassigning content authorship.
- Record
CVE-2026-110132- Updated
- 2026-11-08
GitHub AdvisoriesGHSA-fq3w-qx64-29mp No score
The Sync Post With Other Site WordPress plugin before 1.9.4 does not properly authorize a content...
The Sync Post With Other Site WordPress plugin before 1.9.4 does not properly authorize a content-management action for post types other than pages, allowing users with Contributor-level access or above to create and modify arbitrary custom post types, including reassigning content authorship.
- Record
GHSA-fq3w-qx64-29mp- Updated
- 2026-11-08
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, references | GitHub Advisories | |
| first indexed | CVE List |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-110132 is a vulnerability with no CVSS score yet in Unknown Sync Post With Other Site, published November 8, 2026. No source lists public exploit code. No source names a fixed version.