Skip to content
Sign in
2.7 Low

CVE-2026-19085 The Duplicate Post WordPress plugin before 1.5.6 does not check that a user may read the content of a post before…

Description

The Duplicate Post WordPress plugin before 1.5.6 does not check that a user may read the content of a post before duplicating it, allowing users with a delegated role to republish another user's password-protected post as publicly readable.

Affected products and versions

Product Affected versions Fixed in
Duplicate Post 1.5 earliest → < 1.5.6 1.5.6

Other CVEs of Duplicate Post

The 3 CVEs of Duplicate Post →
CVE-2026-19435 The Duplicate Post WordPress plugin before 1.5.6 does not check the user's capabilities before returning post data,… 2.7 Low CVE-2026-19077 The Duplicate Post WordPress plugin before 1.5.5 does not perform per-object authorisation checks in its bulk copy and… 6.5 Medium
Track this CVE