PT-2026-7498 · WordPress · Twitter Posts To Blog

Nabil Irawan · Published 2026-02-11 · Updated 2026-02-11 · CVE-2026-1786

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions Twitter posts to Blog plugin for WordPress versions up to and including 1.11.25

Description The Twitter posts to Blog plugin for WordPress is susceptible to unauthorized data modification because of a missing capability check on the dg tw options function. This allows unauthenticated attackers to modify plugin settings, including Twitter API credentials, post author, post status, and the capability required to access the plugin's admin menu.

Recommendations Update the Twitter posts to Blog plugin to a version newer than 1.11.25.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2026-1786

Affected Products

Twitter Posts To Blog

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-1786 · Security Note
• https://t.me/CVEtracker/44395 · Telegram Post
• https://wordfence.com/threat-intel/vulnerabilities/id/abcbb84c-6c2d-40c1-8c64-7d4866fa9503?source=cve · Note
• https://plugins.trac.wordpress.org/browser/twitter-posts-to-blog/trunk/functions.php#L426 · Note