[MEDIUM] Yoast Duplicate Post has an Authenticated (Contributor+) Missing Authorization to Arbitrary Post Duplication and Overwrite

PKSA-gmm7-sf5q-mmt1 CVE-2026-1217 GHSA-g9w4-m5fx-x3wv

Affected package: yoast/duplicate-post

Affected version: <=4.5

Reported by:
GitHub