PT-2026-79307

CVE-2026-19085

Published

2026-08-21

Updated

2026-08-24

Description by

CVSS 3.1

2.7

Low

MetricsAV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Duplicate Post WordPress plugin versions prior to 1.5.6

Description Insufficient validation occurs when duplicating posts, as the plugin fails to verify if the user has permission to read the content before the duplication process. This allows users with delegated roles to republish password-protected posts created by other users, making the content publicly readable.

Recommendations Update Duplicate Post WordPress plugin to version 1.5.6 or later.

Exploitability

Exploit

Fix

Impacts

Researchers

Erwan Lr

Vendors

Affected products

Weakness enumeration

CWE-639: Authorization Bypass Through User-Controlled Key

Related identifiers