Is CVE-2026-19085 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-19085?

CVE-2026-19085 has a CVSS v3 severity of LOW (2.7).

Back

CVE-2026-19085

Description

The Duplicate Post WordPress plugin before 1.5.6 does not check that a user may read the content of a post before duplicating it, allowing users with a delegated role to republish another user's password-protected post as publicly readable.