Critical · 9.9 CVE-2026-32463 EUVD-2026-60899GHSA-fvcm-5qh8-pf9f

WordPress Sync Post With Other Site plugin <= 1.9.3 - Arbitrary File Upload vulnerability

Published Aug 18, 2026 · Updated Aug 18, 2026 · Assigned by Patchstack

Vendor: Kamlesh Parmar Product: Sync Post With Other Site

Description

Contributor Arbitrary File Upload in Sync Post With Other Site <= 1.9.3 versions.

Affected products

Vendor	Product	Affected	Fixed
Kamlesh Parmar	Sync Post With Other Site	≤ 1.9.3	—

References

https://patchstack.com/database/wordpress/plugin/sync-post-with-other-site/vulnerability/wordpress-sync-post-with-other-site-plugin-1-9-3-arbitrary-file-upload-vulnerability?_s_id=cve vdb-entry