CVE-2026-19085
âšī¸ lowSummary
The Duplicate Post WordPress plugin before 1.5.6 does not check that a user may read the content of a post before duplicating it, allowing users with a delegated role to republish another user's password-protected post as publicly readable.
CVSS Score
2.7
Low
EPSS Score
0.2
Exploit Probability
Published Date
2026-08-21
First Seen: 2026-08-22
đ Relative Risk Intelligence
This CVE is Lower Risk - more severe than 1.5% of all 348,756 vulnerabilities in our database.
#343,548
Below average severity
Severity Percentile
đ¯ CISA SSVC Assessment Updated: Aug 21, 2026
đ Exploitation Status
None
No known exploits
âī¸ Automatable
NO
Requires human interaction
đĨ Technical Impact
Partial
Limited system impact
đ Discovered By
Erwan LR (WPScan)
WPScan (coordinator)
SSVC data provided by
CISA
Last Modified
2026-08-21
Source
NVD đ
CVSS Vector 3.1
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
CWE IDs (Weakness Types)