CVE-2026-1786

Name of the Vulnerable Software and Affected Versions Twitter posts to Blog plugin for WordPress versions up to and including 1.11.25

Description The Twitter posts to Blog plugin for WordPress is susceptible to unauthorized data modification because of a missing capability check on the dg tw options function. This allows unauthenticated attackers to modify plugin settings, including Twitter API credentials, post author, post status, and the capability required to access the plugin's admin menu.

Recommendations Update the Twitter posts to Blog plugin to a version newer than 1.11.25.