CPE
The Post Duplicator WordPress plugin fails to validate role capabilities, allowing site administrators on multisite networks to elevate privileges to Super Admin status.