{
 "id": "WPSEC-2026-2975",
 "url": "https://wpsec.com/vuln/WPSEC-2026-2975/",
 "json_url": "https://wpsec.com/vuln/WPSEC-2026-2975/advisory.json",
 "markdown_url": "https://wpsec.com/vuln/WPSEC-2026-2975/index.md",
 "title": "Duplicate Post <= 1.5.7 - Authenticated (Subscriber+) Missing Authorization to Plugin Settings Update",
 "description": "The Duplicate Post plugin for WordPress is vulnerable to unauthorized modification of data in all versions up to, and including, 1.5.7. This is due to a missing capability check on the save_options function of the cdp_action_handling AJAX action. This makes it possible for authenticated attackers, with subscriber-level access and above whose role has been granted access to the plugin, to overwrite the plugin's global settings and copy profiles, including which roles may use the plugin and the slug takeover option. These settings are meant to be changed only by administrators.",
 "plugin": {
  "slug": "copy-delete-posts",
  "name": "Duplicate Post",
  "full_name": "Duplicate Post",
  "wordpress_org": "https://wordpress.org/plugins/copy-delete-posts/",
  "advisories_url": "https://wpsec.com/vuln/plugin/copy-delete-posts/",
  "attacksurface": "https://attacksurface.wpsec.com/plugin/copy-delete-posts"
 },
 "type": "NO AUTHORISATION",
 "cwe": [
  "CWE-862"
 ],
 "cve": [],
 "cvss": {
  "version": "3.1",
  "score": 3.1,
  "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N",
  "severity": "Low"
 },
 "affected": {
  "ranges": [
   {
    "from": null,
    "from_inclusive": true,
    "to": "1.5.8",
    "to_inclusive": false
   }
  ],
  "text": [
   "all versions before 1.5.8"
  ]
 },
 "introduced_in": null,
 "fixed_in": "1.5.8",
 "remediation": "Update to 1.5.8 or later.",
 "fix_released": "2026-11-10T16:01:40+00:00",
 "published": "2026-11-12T17:52:14+00:00",
 "updated": "2026-11-12T17:14:20.837335+00:00",
 "also_published_as": null,
 "references": [
  "https://wpsec.com/vuln/WPSEC-2026-2975/",
  "https://plugins.svn.wordpress.org/copy-delete-posts/tags/1.5.8/",
  "https://wordpress.org/plugins/copy-delete-posts/"
 ],
 "attacksurface_url": "https://attacksurface.wpsec.com/plugin/copy-delete-posts",
 "source": "WPSec",
 "license": {
  "name": "CC BY 4.0",
  "url": "https://creativecommons.org/licenses/by/4.0/"
 },
 "usage": {
  "plugin": "Low",
  "affected_versions": "Low",
  "as_of": "2026-11-12"
 }
}