A vulnerability, which was classified as problematic, was found in detheme DethemeKit for Elementor Plugin up to 2.1.8 on WordPress. Affected is the function duplicate_post. The manipulation leads to authorization bypass.

This vulnerability is traded as CVE-2025-0661. It is possible to launch the attack remotely. There is no exploit available.