CyberRota Analysis
AI-GeneratedThe Content Mask WordPress plugin prior to version 1.8.5.5 is vulnerable as it fails to validate user capabilities for publishing specific post types, enabling users with only Contributor roles to publish posts and pages without proper permissions. This flaw can lead to unauthorized content being published on the site, potentially compromising its integrity and security. WordPress site administrators using this plugin should prioritize updating to the latest version to mitigate this risk.
Original NVD Description
The Content Mask WordPress plugin before 1.8.5.5 does not check the capability required to publish the post type being created, allowing users with a role as low as Contributor to publish posts and pages on the site without holding the publish capability.