CVE-2026-77003

Name of the Vulnerable Software and Affected Versions Content Mask versions prior to 1.8.5.5

Description The Content Mask WordPress plugin fails to verify the necessary permissions required to publish the post type being created. This allows users with the Contributor role to publish posts and pages on the site, bypassing the standard requirement for publish capabilities. This issue occurs within the create new content mask() function.

Recommendations Update the plugin to version 1.8.5.5 or later.