Improper Authorization Flaw in Sync Post With Other Site WordPress Plugin
CVE-2026-110132
Currently unrated
Key Information:
- Vendor
WordPress
- Vendor
- CVE Published:
- 8 November 2026
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2026-110132?
The Sync Post With Other Site plugin for WordPress prior to version 1.9.4 is susceptible to an improper authorization vulnerability. This flaw permits users with Contributor-level access or higher to create and modify arbitrary custom post types. Consequently, it poses risks including potential unauthorized content modification and the ability to reassign ownership of posts, which could lead to content integrity issues on affected sites.
Affected Version(s)
Sync Post With Other Site 1.9.3 < 1.9.4
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.