CVE-2026-1935

🗓️ 21 Mar 2026 04:16:56Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 1 Views

WordPress LinkedIn Company Posts plugin up to 1.0.0 lets Subscriber+ users delete LinkedIn data via missing authorization.

Reporter	Title	Published	Views	Family All 10
ATTACKERKB	CVE-2026-1935	21 Mar 202603:26	–	attackerkb
CNNVD	WordPress plugin Company Posts for LinkedIn 安全漏洞	21 Mar 202600:00	–	cnnvd
CVE	CVE-2026-1935	21 Mar 202603:26	–	cve
Cvelist	CVE-2026-1935 Company Posts for LinkedIn <= 1.0.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary LinkedIn Post Data Deletion	21 Mar 202603:26	–	cvelist
EUVD	EUVD-2026-13988	21 Mar 202606:30	–	euvd
Patchstack	WordPress Company Posts for LinkedIn plugin <= 1.0.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary LinkedIn Post Data Deletion vulnerability	23 Mar 202619:14	–	patchstack
Positive Technologies	PT-2026-26827	21 Mar 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-1935	26 Mar 202615:10	–	redhatcve
Vulnrichment	CVE-2026-1935 Company Posts for LinkedIn <= 1.0.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary LinkedIn Post Data Deletion	21 Mar 202603:26	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (March 16, 2026 to March 22, 2026)	27 Mar 202621:11	–	wordfence

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/4c635405-997e-44ea-8851-7d09051307ad
plugins	www.plugins.trac.wordpress.org/browser/company-posts-for-linkedin/trunk/admin/class-linkedin-company-posts-admin.php
plugins	www.plugins.trac.wordpress.org/browser/company-posts-for-linkedin/tags/1.0.0/admin/class-linkedin-company-posts-admin.php

22 Apr 2026 21:32Current

CVSS 3.14.3

EPSS0.00037

WordPress LinkedIn Company Posts Missing Authorization Subscriber access Delete data Reset handler Vulnerability