CVE Catalog

CVE-2026-32463

CriticalCVSS 9.9
Published: Updated: Translated: NVD NIST

Summary

A user with the Contributor role can upload arbitrary files in Sync Post With Other Site versions up to 1.9.3.

Risk Assessment

Potential to place malicious files on the server, which could lead to site compromise.

Recommendation

Update the Sync Post With Other Site plugin to a version newer than 1.9.3.

Original NVD description (English source)

Contributor Arbitrary File Upload in Sync Post With Other Site <= 1.9.3 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS