CVE-2026-53739

Name of the Vulnerable Software and Affected Versions Yoast Duplicate Post versions prior to 4.7

Description A cross-site request forgery issue exists in the duplicate post dismiss notice handler, which fails to verify a nonce (a unique token used to prevent replay attacks) or user capabilities. This allows attackers to deceive authenticated users into submitting a request that modifies the duplicate post show notice site option, resulting in the suppression of admin notices across the entire network.

Recommendations Update to a version newer than 4.6.