brainstation23 vulnerabilities

Products

• Company Posts for LinkedIn 1

Latest brainstation23 CVEs

Newest publication first

1. CVE-2026-1935 Company Posts for LinkedIn <= 1.0.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary LinkedIn Post Data Deletion

   Published 2026-03-21

   Medium·CVSS 4.3 EPSS 0.25%

   The Company Posts for LinkedIn plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.0.0. This is due to a missing capability check on the linkedin_company_post_reset_handler() function hooked to admin_post_reset_linkedin_company_post...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.