WordPress Plugin Duplicate Page or Post Cross-Site Scripting Vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A security vulnerability exists in the WordPress plugin Duplicate Page or Post, which stems from the plugin's...

PT-2022-9631

Name of the Vulnerable Software and Affected Versions Duplicate Page or Post WordPress plugin versions prior to 1.5.1 Description The issue concerns a lack of authorization and a flawed CSRF check in the wpdevart duplicate post parametrs save in db AJAX action. This allows any authenticated user ...

CVE-2021-25075: Missing Authorization

The Duplicate Page or Post WordPress plugin before 1.5.1 does not have any authorisation and has a flawed CSRF check in the wpdevartduplicatepostparametrssaveindb AJAX action, allowing any authenticated users, such as subscriber to call it and change the plugin's settings, or perform such attack...