CVE-2023-4792

The CVE-2023-4792 entry describes a vulnerability in the WordPress plugin Duplicate Post Page Menu & Custom Post Type where a missing capability check in the function duplicate_ppmc_post_as_draft allows authenticated users with subscriber access or higher to duplicate posts/pages. Affected versio...

CVE-2023-4792 Duplicate Post Page Menu & Custom Post Type <= 2.3.1 - Missing Authorization to Post Duplication

The Duplicate Post Page Menu & Custom Post Type plugin for WordPress is vulnerable to unauthorized page and post duplication due to a missing capability check on the duplicateppmcpostasdraft function in versions up to, and including, 2.3.1. This makes it possible for authenticated attackers with...