{"affected":[{"defaultStatus":"unaffected","product":"Duplicate Post","source":"CNA: WPScan","vendor":"Unknown","versions":[{"lessThan":"1.5.8","status":"affected","version":"0","versionType":"semver"}]}],"cveId":"CVE-2026-118183","cwes":["CWE-862"],"description":"The Duplicate Post WordPress plugin before 1.5.8 does not check whether a user may publish posts when duplicating one, allowing users of a role an administrator has given Duplicate Post WordPress plugin before 1.5.8 access to, such as Contributors, to create published posts, including posts attributed to other users.","epss":null,"exploits":[{"kind":"exploit","source":"CNA: WPScan","url":"https://wpscan.com/vulnerability/a71cdd9f-3dc1-4034-97ce-45591b961716/"}],"kev":null,"metrics":[],"modifiedAt":1794636007219,"publishedAt":1794636007219,"references":[{"source":"CNA: WPScan","tags":["exploit","vdb-entry","technical-description"],"url":"https://wpscan.com/vulnerability/a71cdd9f-3dc1-4034-97ce-45591b961716/"}],"remediation":[],"revision":"b1b3172f956971f5f6e0b167127b0ecd8d9645fc093cbe0d945242a4969612a6","sources":[{"modifiedAt":1794636007219,"name":"CNA: WPScan","retrievedAt":1794640111452,"url":"https://www.cve.org/CVERecord?id=CVE-2026-118183"}],"ssvc":null,"status":"published","title":"Copy & Delete Posts < 1.5.8 - Authenticated Post Publishing Restriction Bypass","updatedAt":1794640111452}