CVE-2026-118181

The Duplicate Post WordPress plugin, in versions prior to 1.5.8 , is vulnerable to an access control modification. The plugin fails to perform a capability check when saving global settings, relying instead on its own role-access list. This allows users with lower privileges, as low as Subscriber...