Sync Post With Other Site Vulnerabilities

The Sync Post With Other Site plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to 1.9.3. This makes it possible for authenticated attackers, with contributor-level access and above, to perform an unauthorized action.

CVSS:

4.3

Affected:

up to 1.9.3

Fixed in:

1.9.3

Disclosed:

Jul 30, 2026

CVE-2026-14923 on NVD →

The Sync Post With Other Site plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'sps_add_update_post' function in all versions up to, and including, 1.6. This makes it possible for authenticated attackers, with Subscriber-level access and above, to create n...

CVSS:

4.3

Affected:

up to 1.6

Fixed in:

1.7

Disclosed:

Aug 2, 2024

CVE-2024-6709 on NVD →

The Sync Post With Other Site plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5.1. This is due to missing or incorrect nonce validation on an unknown function. This makes it possible for unauthenticated attackers to perform an unknown action granted they can tric...

CVSS:

4.3

Affected:

up to 1.5.1

Fixed in:

1.5.2

Disclosed:

Apr 11, 2024

CVE-2024-32082 on NVD →