Threats tagged 'ghsa-6349-73wc-mj72'

The Duplicate Post WordPress plugin versions before 1.5.8 have a vulnerability where the plugin does not verify if a user has permission to publish posts when duplicating them. This flaw allows users with roles granted access to the plugin, such as Contributors, to create published posts, including posts attributed to other users.