Lucene search
+L

141 matches found

NVD
NVD
added 2025/01/11 3:15 a.m.17 views

CVE-2024-12472

The Post Duplicator plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.36 via the mtphrduplicatepost function due to insufficient restrictions on which posts can be duplicated. This makes it possible for authenticated attackers, with Contributor-lev...

4.3CVSS0.00309EPSS
SaveExploits0References2
CVE
CVE
added 2025/01/11 2:20 a.m.53 views

CVE-2024-12472

CVE-2024-12472 affects the WordPress Post Duplicator plugin. Reports indicate information exposure via mtphr_duplicate_post() in all versions up to 2.36, enabling authenticated attackers with Contributor+ rights to duplicate posts and access data from password‑protected, private, or draft posts. ...

4.3CVSS7.2AI score0.00309EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2025/01/11 2:20 a.m.29 views

CVE-2024-12472 Post Duplicator <= 2.36 - Authenticated (Contributor+) Protected Post Disclosure

The Post Duplicator plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.36 via the mtphrduplicatepost function due to insufficient restrictions on which posts can be duplicated. This makes it possible for authenticated attackers, with Contributor-lev...

4.3CVSS0.00309EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/01/11 2:20 a.m.12 views

CVE-2024-12472 Post Duplicator <= 2.36 - Authenticated (Contributor+) Protected Post Disclosure

The Post Duplicator plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.36 via the mtphrduplicatepost function due to insufficient restrictions on which posts can be duplicated. This makes it possible for authenticated attackers, with Contributor-lev...

4.3CVSS7.2AI score0.00309EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/01/11 12:00 a.m.14 views

WordPress plugin Post Duplicator 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.3CVSS7.8AI score0.00309EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/01/11 12:00 a.m.18 views

PT-2025-1861 · WordPress · Post Duplicator

Name of the Vulnerable Software and Affected Versions: Post Duplicator plugin for WordPress version 2.36 and earlier Description: The issue is related to Information Exposure due to insufficient restrictions on which posts can be duplicated, making it possible for authenticated attackers with...

5.3CVSS7.1AI score0.00309EPSS
SaveExploits0References8
Patchstack
Patchstack
added 2025/01/10 8:58 p.m.15 views

WordPress Post Duplicator plugin <= 2.36 - Authenticated (Contributor+) Protected Post Disclosure vulnerability

Authenticated Contributor+ Protected Post Disclosure vulnerability discovered by Webbernaut in WordPress Plugin Post Duplicator versions = 2.36...

5.3CVSS7AI score0.00309EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2024/12/09 1:15 p.m.9 views

CVE-2023-49835

Missing Authorization vulnerability in Metaphor Creations Post Duplicator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Duplicator: from n/a through 2.31...

4.3CVSS5.8AI score0.00409EPSS
SaveExploits0References1
NVD
NVD
added 2024/12/09 1:15 p.m.16 views

CVE-2023-49835

Missing Authorization vulnerability in Metaphor Creations Post Duplicator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Duplicator: from n/a through 2.31...

4.3CVSS0.00409EPSS
SaveExploits0References1
NVD
NVD
added 2024/12/09 1:15 p.m.17 views

CVE-2023-31214

Missing Authorization vulnerability in Arul Prasad J WP Quick Post Duplicator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Quick Post Duplicator: from n/a through 2.0...

5.4CVSS0.00339EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2024/12/09 1:15 p.m.32 views

CVE-2023-31214

Missing Authorization vulnerability in Arul Prasad J WP Quick Post Duplicator wp-quick-post-duplicator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Quick Post Duplicator: from n/a through = 2.0...

5.4CVSS5.8AI score0.00339EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2024/12/09 11:30 a.m.17 views

CVE-2023-31214 WordPress WP Quick Post Duplicator plugin <= 2.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Arul Prasad J WP Quick Post Duplicator wp-quick-post-duplicator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Quick Post Duplicator: from n/a through = 2.0...

5.4CVSS6.9AI score0.00339EPSS
SaveExploits0References1
CVE
CVE
added 2024/12/09 11:30 a.m.41 views

CVE-2023-31214

CVE-2023-31214 affects WordPress WP Quick Post Duplicator

5.4CVSS8.5AI score0.00339EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/12/09 11:30 a.m.12 views

CVE-2023-49835 WordPress Post Duplicator plugin <= 2.31 - Broken Access Control vulnerability

Missing Authorization vulnerability in Metaphor Creations Post Duplicator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Duplicator: from n/a through 2.31...

4.3CVSS6.9AI score0.00409EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/12/09 11:30 a.m.26 views

CVE-2023-49835 WordPress Post Duplicator plugin <= 2.31 - Broken Access Control vulnerability

Missing Authorization vulnerability in Metaphor Creations Post Duplicator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Duplicator: from n/a through 2.31...

4.3CVSS0.00409EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/09 12:00 a.m.7 views

WordPress plugin WP Quick Post Duplicator 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.4CVSS8.8AI score0.00339EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/12/09 12:00 a.m.7 views

PT-2024-12263 · WordPress · Wp Quick Post Duplicator

Name of the Vulnerable Software and Affected Versions: WP Quick Post Duplicator versions 2.0 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploitation of incorrectly configured access control security levels. Recommendations: For WP Quick Po...

5.4CVSS9.5AI score0.00339EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/12/09 12:00 a.m.11 views

PT-2024-13812 · Metaphor Creations · Post Duplicator

Name of the Vulnerable Software and Affected Versions: Metaphor Creations Post Duplicator versions through 2.31 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions...

4.3CVSS9.2AI score0.00409EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2024/12/09 12:00 a.m.12 views

WordPress plugin Post Duplicator 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

4.3CVSS8.7AI score0.00409EPSS
SaveExploits0References1
WPVulnDB
WPVulnDB
added 2023/12/08 12:00 a.m.17 views

Post Duplicator < 2.32 - Missing Authorization via mtphr_duplicate_post

Description The Post Duplicator plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the mtphrduplicatepost function in versions up to, and including, 2.31. This makes it possible for authenticated attackers, with contributor-level access an...

6.7AI score0.00409EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder