CVE-2026-30452

Textpattern CMS version 4.9.0 is affected by a Broken Access Control vulnerability within its article management system. The root cause is an insufficient authorization check during the duplicate-and-save workflow located in textpattern/include/txp_article.php. An authenticated user with low priv...