Skip to content
Sign in
2.7 Low

CVE-2026-77003 The Content Mask WordPress plugin before 1.8.5.5 does not check the capability required to publish the post type being…

Description

The Content Mask WordPress plugin before 1.8.5.5 does not check the capability required to publish the post type being created, allowing users with a role as low as Contributor to publish posts and pages on the site without holding the publish capability.

Affected products and versions

Product Affected versions Fixed in
Content Mask 1.8 1.8.0 → < 1.8.5.5 1.8.5.5

Other CVEs of Content Mask

The 3 CVEs of Content Mask →
CVE-2025-15690 The Content Mask WordPress plugin before 1.8.5.6 does not properly sanitise and escape content submitted with a post… 6.8 Medium CVE-2022-1203 The Content Mask WordPress plugin before 1.8.4.1 does not have authorisation and CSRF checks in various AJAX actions, as… Not rated
Track this CVE