CVE-2026-94505

Name of the Vulnerable Software and Affected Versions Nelio Content – Editorial Calendar & Social Media Auto-Posting versions prior to 4.5.1

Description An authorization bypass exists because the plugin fails to properly verify if a user is authorized to perform specific actions. This allows authenticated attackers with contributor-level access or higher to permanently delete any reusable social message (nc reusable social post), regardless of whether the message was created by administrators or other privileged users.

Recommendations Update the plugin to a version later than 4.5.0.