CVE-2026-1935

Name of the Vulnerable Software and Affected Versions The Company Posts for LinkedIn plugin for WordPress versions prior to 1.0.1

Description The software is susceptible to a missing authorization issue. This is caused by a missing capability check within the linkedin company post reset handler() function, which is connected to the admin post reset linkedin company post action. Attackers with Subscriber-level access or higher can delete LinkedIn post data stored in the site’s options table.

Recommendations Update The Company Posts for LinkedIn plugin for WordPress to version 1.0.1 or later.