CVE-2026-2301Medium 4.3Post Duplicator <= 3.0.8 - Missing Authorization to Authenticated (Contributor+) Protected Post Meta Insertion via 'customMetaData' Parameter0.2%
CVE-2025-24736Medium 4.3WordPress Post Duplicator plugin <= 2.35 - Broken Access Control vulnerability0.3%