Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The Content Mask WordPress plugin before 1.8.5.5 does not check the capability required to publish the post type being created, allowing users with a role as low as Contributor to publish posts and pages on the site without holding the publish capability.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-77003 Contributor Privilege Escalation in Content Mask WordPress Plugin Before 1.8.5.5 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-77003
Post summary
The text announces CVE‑2026‑77003, describing a contributor privilege escalation flaw in Content Mask WordPress Plugin versions before 1.8.5.5.
CVE-2026-77003 The Content Mask WordPress plugin before 1.8.5.5 does not check the capability required to publish the post type being created, allowing users with a role as low as C… https://www.cve.org/CVERecord?id=CVE-2026-77003
Post summary
The text outlines that the Content Mask WordPress plugin (pre‑v1.8.5.5) lacks capability verification, allowing users with low roles to publish posts, and references CVE‑2026‑77003.