CVE-2026-118183
Copy & Delete Posts < 1.5.8 - Authenticated Post Publishing Restriction Bypass
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The Duplicate Post WordPress plugin before 1.5.8 does not check whether a user may publish posts when duplicating one, allowing users of a role an administrator has given Duplicate Post WordPress plugin before 1.5.8 access to, such as Contributors, to create published posts, including posts attributed to other users.
| Vendor | unknown |
| Product | duplicate post |
| Published | Nov 14, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown duplicate post
Be the first to know when new unknown vulnerabilities affecting unknown duplicate post are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / Duplicate Post
0 < 1.5.8
References
Credits
Karthik Ramakrishnan WPScan