https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T13:01:32.734254+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-19435 CVE-2026-19435 — Copy & Delete Posts < 1.5.6 - Authenticated Arbitrary Post Content and Password Disclosure 2026-10-09T13:01:32.735340+00:00

Affected: Unknown Duplicate Post

The Duplicate Post WordPress plugin before 1.5.6 does not check the user's capabilities before returning post data, allowing users with a delegated role to read the content, metadata and passwords of posts they are not allowed to access, including other users' private and draft content.