CVE-2026-19435

None

Open

TLP:CLEAR

Copy & Delete Posts < 1.5.6 - Authenticated Arbitrary Post Content and Password Disclosure

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

The Duplicate Post WordPress plugin before 1.5.6 does not check the user's capabilities before returning post data, allowing users with a delegated role to read the content, metadata and passwords of posts they are not allowed to access, including other users' private and draft content.

Details

Confidence: 90%
Published: Aug 21, 2026
Last Modified: Aug 21, 2026

Notes

0

Log in to add a note

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

0

Log in to add an opinion

No opinions yet. Be the first to assess this intelligence.