CVE-2026-111740

The Post Duplicator WordPress plugin, in versions prior to 3.0.17 , is vulnerable to a permission check flaw. The plugin fails to verify if a requesting user has authorization to view specific posts before returning a list for a post type. This allows users with roles as low as Contributor to acc...