{"affected":[{"defaultStatus":"unaffected","product":"Sync Post With Other Site","source":"CNA: WPScan","vendor":"Unknown","versions":[{"lessThan":"1.9.4","status":"affected","version":"1.9.3","versionType":"semver"}]}],"cveId":"CVE-2026-110132","cwes":["CWE-863"],"description":"The Sync Post With Other Site WordPress plugin before 1.9.4 does not properly authorize a content-management action for post types other than pages, allowing users with Contributor-level access or above to create and modify arbitrary custom post types, including reassigning content authorship.","epss":null,"exploits":[{"kind":"exploit","source":"CNA: WPScan","url":"https://wpscan.com/vulnerability/5c68dd50-96a3-414c-8060-9f70bb87766f/"}],"kev":null,"metrics":[],"modifiedAt":1794117631078,"publishedAt":1794117631078,"references":[{"source":"CNA: WPScan","tags":["exploit","vdb-entry","technical-description"],"url":"https://wpscan.com/vulnerability/5c68dd50-96a3-414c-8060-9f70bb87766f/"}],"remediation":[],"revision":"7a955fb3d52fc5cb8d8634c532e82a5041c0e2d20a6775697b62ebd034604422","sources":[{"modifiedAt":1794117631078,"name":"CNA: WPScan","retrievedAt":1794118110234,"url":"https://www.cve.org/CVERecord?id=CVE-2026-110132"}],"ssvc":null,"status":"published","title":"Sync Post With Other Site 1.9.3 - Contributor+ Arbitrary Custom Post Type Creation and Modification","updatedAt":1794118110234}