CVE-2026-32463

WordPress Sync Post With Other Site plugin <= 1.9.3 - Arbitrary File Upload vulnerability

Contributor Arbitrary File Upload in Sync Post With Other Site <= 1.9.3 versions.


We have discovered 537 live websites that are affected by CVE-2026-32463.

Run a Free Instant Scan




Affected Software

Product  Sync Post With Other Site
Category Wordpress Plugins
Vulnerable Domains537 live websites (100% of Sync Post With Other Site install base)
Vulnerable Versions
  • from 0 through 1.9.3
Vulnerable Versions Count11 versions ( 100% of all versions)


Common Weakness Enumeration

CWE-434 Unrestricted Upload of File with Dangerous Type



Details

  • Published - Aug 18, 2026
  • Updated - Aug 18, 2026

Credits

  • Nabil Irawan | Patchstack Bug Bounty Program (finder)

Website Distribution by Country

Number of websites using CVE-2026-32463
United States172 websites



Germany83 websites
Italy25 websites
GB24 websites
Netherlands16 websites
France15 websites
Brazil14 websites
Australia13 websites
Romania12 websites
Spain11 websites

Website Distribution by TLD

Number of websites using CVE-2026-32463
.com201 websites
.de57 websites
.org32 websites
.eu17 websites
.it17 websites
.net14 websites
.com.br13 websites
.nl11 websites
.fr11 websites
.co.uk10 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2026-32463

Top websites that are affected by CVE-2026-32463. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
****.net United States***,***
*************.com United States***,***
**********.org France***,***
**********.com United States***,***
*************.dk Denmark***,***
******.org Germany***,***
********.org United States***,***
************.com United States***,***
*********.com United States***,***
**************.nl Netherlands***,***
See full domain list

FAQ

CVE-2026-32463 is Unrestricted Upload of File with Dangerous Type in Sync Post With Other Site
A total of 537 websites have been identified as vulnerable to CVE-2026-32463, based on global website indexing conducted by WebTechSurvey.
The Sync Post With Other Site is affected by the CVE-2026-32463 vulnerability.
Sync Post With Other Site versions up to and including 1.9.3 are vulnerable to CVE-2026-32463.