CVE-2026-0718 | wpxpo PostX Plugin up to 5.0.5 on WordPress ultp_shareCount_callback authorization

A vulnerability identified as critical has been detected in wpxpo PostX Plugin up to 5.0.5 on WordPress. This impacts the function ultp_shareCount_callback. The manipulation leads to missing authorization.

This vulnerability is referenced as CVE-2026-0718. Remote exploitation of the attack is possible. No exploit is available.