CVE-2026-77003 - Content Mask 1.8.0 - 1.8.5.4 - Contributor Publish Capability Bypass via create_new_content_mask
Brief
CVE ID : CVE-2026-77003
Published : Aug. 23, 2026, 6:17 a. m.
- 14 hours, 54 minutes ago
Description : The Content Mask WordPress plugin before 1.
- 5. 5 does not check the capability required to publish the post type being created, allowing users with a role as low as Contributor to publish posts and pages on the site without holding the publish capability.
Severity: 2.7
- LOW
Visit the link for more details, such as CVSS details, affected products, timeline, and more...