AI description
CVE-2026-77003 is a vulnerability identified in the Content Mask WordPress plugin, affecting versions prior to 1.8.5.5. This flaw stems from the plugin's failure to adequately verify the required capabilities for publishing post types. Consequently, users with a Contributor role, which typically has limited publishing permissions, are able to publish posts and pages on a WordPress site without possessing the explicit publish capability.
- Description
- The Content Mask WordPress plugin before 1.8.5.5 does not check the capability required to publish the post type being created, allowing users with a role as low as Contributor to publish posts and pages on the site without holding the publish capability.
- Source
- contact@wpscan.com
- NVD status
- Deferred
CVSS 3.1
- Type
- Secondary
- Base score
- 2.7
- Impact score
- 1.4
- Exploitability score
- 1.2
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
- Severity
- LOW
- 134c704f-9b21-4f2e-91b3-4a467353bcc0
- CWE-269
- Hype score
- Not currently trending
CVE-2026-77003 The Content Mask WordPress plugin before 1.8.5.5 does not check the capability required to publish the post type being created, allowing users with a role as low as C… https://t.co/TnxwPk7p3R
@CVEnew
23 Aug 2026
1445 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
CVE-2026-77003 Contributor Privilege Escalation in Content Mask WordPress Plugin Before 1.8.5.5 https://t.co/XxQ1O60dnL
@VulmonFeeds
23 Aug 2026
97 Impressions
0 Retweets
0 Likes
1 Bookmark
0 Replies
0 Quotes