What is GHSA-pg99-759r-268m?

GHSA-pg99-759r-268m is a security advisory published by GitHub Security Advisories with Medium severity. The Sync Post With Other Site WordPress plugin before 1.9.3 does not correctly enforce the page...

Which CVE IDs does GHSA-pg99-759r-268m cover?

GHSA-pg99-759r-268m covers the following CVE IDs: CVE-2026-14923. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-pg99-759r-268m?

GHSA-pg99-759r-268m has a CVSS v3 base score of 6.5, published by GitHub Security Advisories.

GHSA-pg99-759r-268mMediumCVSS 6.5

The Sync Post With Other Site WordPress plugin before 1.9.3 does not correctly enforce the page...

Vendor

GitHub Security Advisories

Published

July 30, 2026

Last Modified

July 30, 2026

🔗 CVE IDs covered (1)

CVE-2026-14923 →

📋 Description

The Sync Post With Other Site WordPress plugin before 1.9.3 does not correctly enforce the page-editing capability on a REST route that creates and updates posts, because of an operator-precedence flaw in its authorization check. An authenticated user holding only the post-editing capability (such as a Contributor) can create, publish, and overwrite arbitrary Pages, including modifying content authored by higher-privileged users.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-14923
https://wpscan.com/vulnerability/cc635e60-f80e-4399-a016-9fde9228c58c
https://github.com/advisories/GHSA-pg99-759r-268m