{
 "id": "WPSEC-2026-1724",
 "url": "https://wpsec.com/vuln/WPSEC-2026-1724/",
 "json_url": "https://wpsec.com/vuln/WPSEC-2026-1724/advisory.json",
 "markdown_url": "https://wpsec.com/vuln/WPSEC-2026-1724/index.md",
 "title": "iChart – Easy Charts and Graphs <= 2.2.2 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Post Duplication",
 "description": "The iChart plugin for WordPress is vulnerable to unauthorized post duplication via the qcld_ai_duplicate_chart AJAX action in all versions up to, and including, 2.2.2. This is due to a missing capability check and no restriction on the type of the source post, with only a nonce check, and that nonce was exposed to all logged-in users. This makes it possible for authenticated attackers, with Subscriber-level access and above, to copy the title, content and metadata of arbitrary posts, including private and draft posts, into new published chart posts and to read the copied title in the response.",
 "plugin": {
  "slug": "ichart",
  "name": "iChart – Easy Charts and Graphs",
  "full_name": "iChart – Easy Charts and Graphs",
  "wordpress_org": "https://wordpress.org/plugins/ichart/",
  "advisories_url": "https://wpsec.com/vuln/plugin/ichart/",
  "attacksurface": "https://attacksurface.wpsec.com/plugin/ichart"
 },
 "type": "NO AUTHORISATION",
 "cwe": [
  "CWE-862"
 ],
 "cve": [],
 "cvss": {
  "version": "3.1",
  "score": 5.4,
  "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
  "severity": "Medium"
 },
 "affected": {
  "ranges": [
   {
    "from": null,
    "from_inclusive": true,
    "to": "2.2.3",
    "to_inclusive": false
   }
  ],
  "text": [
   "all versions before 2.2.3"
  ]
 },
 "introduced_in": null,
 "fixed_in": "2.2.3",
 "remediation": "Update to 2.2.3 or later.",
 "fix_released": "2026-10-26T10:44:38+00:00",
 "published": "2026-10-27T10:49:10+00:00",
 "updated": "2026-10-26T13:21:15.911662+00:00",
 "also_published_as": null,
 "references": [
  "https://wpsec.com/vuln/WPSEC-2026-1724/",
  "https://plugins.svn.wordpress.org/ichart/tags/2.2.3/",
  "https://wordpress.org/plugins/ichart/"
 ],
 "attacksurface_url": "https://attacksurface.wpsec.com/plugin/ichart",
 "source": "WPSec",
 "license": {
  "name": "CC BY 4.0",
  "url": "https://creativecommons.org/licenses/by/4.0/"
 },
 "usage": {
  "plugin": "Low",
  "affected_versions": "Low",
  "as_of": "2026-10-27"
 }
}