CVE-2026-1217 Yoast Duplicate Post <= 4.5 - Authenticated (Contributor+) Missing Authorization to Arbitrary Post Duplication and Overwrite

The Yoast Duplicate Post plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the clonebulkactionhandler and republishrequest functions in all versions up to, and including, 4.5. This makes it possible for authenticated attackers, with...

PT-2021-16922 · Joomla · Joomla!

Name of the Vulnerable Software and Affected Versions: Joomla! versions 1.6.0 through 3.9.24 Description: An issue was discovered in Joomla! where inadequate filtering of form contents could allow the overwrite of the author field. Recommendations: For Joomla! versions 1.6.0 through 3.9.24, updat...

[20170406] - Core - ACL Violations

Inadequate filtering of form contents lead allow to overwrite the author of an article...