Vulnerability record/PUBLISHED/Published Nov 14, 2026 06:00:07 UTC
CVE-2026-118183
The Duplicate Post WordPress plugin before 1.5.8 does not check whether a user may publish posts when duplicating one, allowing users of a role an administrator has given Duplicate Post WordPress plugin before 1.5.8 access to, such as Contributors, to create published posts, including posts attributed to other users.
Base scoreN/A/ 10
SeverityNoneCVSS unscored
Exploitability / impact
CVSS metric breakdown
Base severityNone
No CVSS vector is available for this record.
CVSS communicates standardized severity and impact characteristics. It does not establish whether a system is exploitable in your specific environment.
Record context
CVE Numbering AuthorityWPScan
Last updatedNov 14, 2026 06:00:07 UTC
PublishedNov 14, 2026 06:00:07 UTC
ReservedOct 27, 2026 18:31:38 UTC
Credits
- Karthik Ramakrishnan
- WPScan