Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 15 Nov 2026 05:42:45 +0000 CVE-2026-118181 — Copy & Delete Posts < 1.5.8 - Authenticated Plugin Settings and Access Control Modification https://db.gcve.eu/vuln/cve-2026-118181 <p><strong>Affected:</strong> Unknown Duplicate Post</p> <p>The Duplicate Post WordPress plugin before 1.5.8 does not perform a capability check when saving its global settings, relying only on its own role-access list, which allows users of any role an administrator has given Duplicate Post WordPress plugin before 1.5.8 access to, as low as Subscriber, to overwrite those settings, including the role-access list itself.</p> <p><strong>Affected:</strong> Unknown Duplicate Post</p> <p>The Duplicate Post WordPress plugin before 1.5.8 does not perform a capability check when saving its global settings, relying only on its own role-access list, which allows users of any role an administrator has given Duplicate Post WordPress plugin before 1.5.8 access to, as low as Subscriber, to overwrite those settings, including the role-access list itself.</p> https://db.gcve.eu/vuln/cve-2026-118181