Skip to content
Sign in
2.7 Low

CVE-2026-19435 The Duplicate Post WordPress plugin before 1.5.6 does not check the user's capabilities before returning post data,…

Description

The Duplicate Post WordPress plugin before 1.5.6 does not check the user's capabilities before returning post data, allowing users with a delegated role to read the content, metadata and passwords of posts they are not allowed to access, including other users' private and draft content.

Affected products and versions

Product Affected versions Fixed in
Duplicate Post 1.5 earliest → < 1.5.6 1.5.6

Other CVEs of Duplicate Post

The 3 CVEs of Duplicate Post →
CVE-2026-19085 The Duplicate Post WordPress plugin before 1.5.6 does not check that a user may read the content of a post before… 2.7 Low CVE-2026-19077 The Duplicate Post WordPress plugin before 1.5.5 does not perform per-object authorisation checks in its bulk copy and… 6.5 Medium
Track this CVE