CVE-2026-2301 | Post Duplicator Plugin up to 3.0.8 on WordPress REST API Endpoint includes/api.php duplicate_post authorization

A vulnerability was found in Post Duplicator Plugin up to 3.0.8 on WordPress. It has been declared as critical. Impacted is the function duplicate_post of the file includes/api.php of the component REST API Endpoint. The manipulation results in missing authorization.

This vulnerability is reported as CVE-2026-2301. The attack can be launched remotely. No exploit exists.