THREAT OPS › Threat News › [NVD] CVE-2026-4245 (MEDIUM 4.3) — The Post Duplicator plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.0.11. This is due to the `duplicate_post_permissions()` permission callback only verifying the `duplicate_posts` capability without checking whether the requesti
[NVD] CVE-2026-4245 (MEDIUM 4.3) — The Post Duplicator plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.0.11. This is due to the `duplicate_post_permissions()` permission callback only verifying the `duplicate_posts` capability without checking whether the requesti
CVE-2026-4245 CVSS: 4.3 MEDIUM Published: 2026-08-22T12:16:25.400
The Post Duplicator plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.0.11. This is due to the `duplicate_post_permissions()` permission callback only verifying the `duplicate_posts` capability without checking whether the requesting user holds `publish_posts` or other status-gated c
Indicators of compromise
- CVE-2026-4245cve
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-4245