CVE-2026-19085 — Copy & Delete Posts < 1.5.6 - Author+ Password-Protected Post Content Disclosure

CVE-2026-19085

Copy & Delete Posts < 1.5.6 - Author+ Password-Protected Post Content Disclosure PUBLISHED

Description (CNA)

The Duplicate Post WordPress plugin before 1.5.6 does not check that a user may read the content of a post before duplicating it, allowing users with a delegated role to republish another user's password-protected post as publicly readable.

Affected (CNA)

Vendor / product	Versions
Unknown / Duplicate Post	affected 0 before 1.5.6

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/bf9fc250-7a45-48f2-9b43-c4aaf5c9b862/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.