UNKNOWNCVSS not yet scoredVulnerability
CVE-2026-111740
The Post Duplicator WordPress plugin before 3.0.17 does not check whether the requesting user may view each post before returning a list of posts for a post type, allowing users with a role as low as Contributor to read the titles and hierarchy of other users' draft and private posts.
Properties
- Last source
- NVD
- Nvd fetched at
- 2026-11-04T09:33:16.411751+00:00
- Cve id
- CVE-2026-111740
- First seen by Signal
- 2026-11-04T09:34:19+00:00
- Retrieved at
- 2026-11-04T09:34:19+00:00
- Published at
- 2026-11-04T06:16:58.620
- Last modified
- 2026-11-04T06:16:58.620
Explore deeper with Ninja Signal's threat intelligence graph