Threats tagged 'ghsa-q7h7-28h6-p557'

The Post Duplicator WordPress plugin versions before 3.0.18 contain a vulnerability that allows a site administrator on a multisite network, who is not a Super Admin, to overwrite arbitrary site options. This includes the ability to modify role definitions, potentially granting themselves network-management capabilities.