Post Duplicator vulnerabilities
We track 2 vulnerabilities in Post Duplicator products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 9, 2026.
2vulnerabilities
0critical
2high
0exploited
7.2average CVSS score
Latest Post Duplicator vulnerabilities
- 7.2 High severity
Post Duplicator: Improper Privilege Management
The Post Duplicator WordPress plugin before 3.0.18 does not validate the capabilities assigned to roles through its permissions settings, allowing a site administrator on a multisite network who is not a Super Admin to grant any role arbitrary capabilities, in
- 7.2 High severity
Post Duplicator: Incorrect Authorization
The Post Duplicator WordPress plugin before 3.0.18 does not restrict settings saves to its own options, allowing a site administrator on a multisite network who is not a Super Admin to overwrite arbitrary options of their site, including the role definitions,