Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Duplicate Post 1.5.6 Clear all filters
TI-2026-15842 CVE-2026-19435 · GHSA-j65v-fgx5-j923

Copy & Delete Posts < 1.5.6 - Authenticated Arbitrary Post Content and Password Disclosure

Priority LOW 13

The Duplicate Post WordPress plugin before 1.5.6 does not check the user's capabilities before returning post data, allowing users with a delegated role to read the content, metadata and passwords of posts they are not a…

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00316 Published 2026-08-21 Fixed in 1.5.6 CWE-200
TI-2026-15602 CVE-2026-19085 · GHSA-mf7v-v9w5-f74c

Copy & Delete Posts < 1.5.6 - Author+ Password-Protected Post Content Disclosure

Priority LOW 13

The Duplicate Post WordPress plugin before 1.5.6 does not check that a user may read the content of a post before duplicating it, allowing users with a delegated role to republish another user's password-protected post a…

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00299 Published 2026-08-21 Fixed in 1.5.6 CWE-639