PT-2026-147373

CVE-2026-118183

·

Published

2026-11-14

·

Updated

2026-11-14

Description by

Score
N/A
Not available

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.

The Duplicate Post WordPress plugin before 1.5.8 does not check whether a user may publish posts when duplicating one, allowing users of a role an administrator has given Duplicate Post WordPress plugin before 1.5.8 access to, such as Contributors, to create published posts, including posts attributed to other users.
Exploitability
Exploit
Researchers
Vendors
Affected products
Related identifiers
CVE-2026-118183
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com