post_duplicator vulnerabilities

CVEs whose affected-version data names the post_duplicator package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-111740Low· 2.7

5d ago

Post Duplicator < 3.0.17 - Contributor+ Draft and Private Post Title Disclosure

The Post Duplicator WordPress plugin before 3.0.17 does not check whether the requesting user may view each post before returning a list of posts for a post type, allowing users with a role as low as Contributor to read the titles and hi…

▾ SunlitEPSS 0.23%via CVEORG