Aller au contenu
Se connecter
2.7 Faible

CVE-2026-19435 The Duplicate Post WordPress plugin before 1.5.6 does not check the user's capabilities before returning post data,…

Description

The Duplicate Post WordPress plugin before 1.5.6 does not check the user's capabilities before returning post data, allowing users with a delegated role to read the content, metadata and passwords of posts they are not allowed to access, including other users' private and draft content.

Produits et versions touchés

Produit Versions touchées Corrigé en
Duplicate Post 1.5 premières → < 1.5.6 1.5.6

Autres CVE de Duplicate Post

Les 3 CVE de Duplicate Post →
CVE-2026-19085 The Duplicate Post WordPress plugin before 1.5.6 does not check that a user may read the content of a post before… 2.7 Faible CVE-2026-19077 The Duplicate Post WordPress plugin before 1.5.5 does not perform per-object authorisation checks in its bulk copy and… 6.5 Moyenne
Suivre cette CVE