Direct naar de inhoud
⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →
cybernieuws.nl Cybersecurity en informatiebeveiling nieuws alerts live · 8 min 141 bronnen 1 vandaag
CVE's Videos Dagbriefing

← Terug naar CVE-database

CVE-2026-121875

HIGH · 7.2 CVSS Gepubliceerd: CWE-269

Beschrijving

The Post Duplicator WordPress plugin before 3.0.18 does not validate the capabilities assigned to roles through its permissions settings, allowing a site administrator on a multisite network who is not a Super Admin to grant any role arbitrary capabilities, including the network-management capabilities reserved to the Super Admin.

References