CVE-2026-1935

The Company Posts for LinkedIn plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.0.0. This is due to a missing capability check on the `linkedin_company_post_reset_handler()` function hooked to `admin_post_reset_linkedin_company_post`. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete LinkedIn post data stored in the site's options table.

• CWE-862

• https://plugins.trac.wordpress.org/browser/company-posts-for-linkedin/tags/1.0.0/admin/class-linkedin-company-posts-admin.php#L625
• https://plugins.trac.wordpress.org/browser/company-posts-for-linkedin/trunk/admin/class-linkedin-company-posts-admin.php#L625
• https://www.wordfence.com/threat-intel/vulnerabilities/id/4c635405-997e-44ea-8851-7d09051307ad?source=cve

Published

Mar 21, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-19343A flaw has been found in code-projects Task Management Syste…7.3
• CVE-2026-19344A vulnerability has been found in code-projects Task Managem…7.3
• CVE-2026-19345A vulnerability was found in code-projects Task Management S…6.5
• CVE-2026-19346A vulnerability was determined in Tenda CH22 1.0.0.1. This v…8.8
• CVE-2026-19347A vulnerability was identified in itsourcecode Hospital Mana…6.3
• CVE-2026-19348A security flaw has been discovered in Shenzhen Aitemi M300 …9.8
• CVE-2026-19350A vulnerability has been found in Dolibarr ERP up to 23.0.3.…6.3
• CVE-2026-19351A vulnerability was found in dresende node-sql-query 0.1.25/…7.3
• CVE-2026-19352A vulnerability was determined in mifi lossless-cut up to 3.…3.1
• CVE-2026-19353A vulnerability has been found in DedeCMS up to 5.7.118 UTF8…5
• CVE-2026-19354A vulnerability was found in lock-upme OPMS up to 831440f37a…6.3
• CVE-2026-19355A vulnerability was determined in MingSoft MCMS up to 3.0.6.…7.3