Skip to content
Threat Feed
Subscribe

Product

Post Duplicator (< 3.0.18)

2 briefs RSS
high advisory

Post Duplicator: Privilege escalation via role capability validation flaw (CVE-2026-121875)

The Post Duplicator WordPress plugin fails to validate role capabilities, allowing site administrators on multisite networks to elevate privileges to Super Admin status.

Post Duplicator
1t 1c
high advisory

Post Duplicator: Privilege escalation via improper option saving (CVE-2026-121874)

The Post Duplicator WordPress plugin versions prior to 3.0.18 contain an access control flaw allowing site administrators in multisite environments to overwrite arbitrary site options and escalate privileges.

Post Duplicator wordpress plugin privilege-escalation web-application
1t 1c