14 matches found
EUVD-2023-40475
Malicious code in bioql PyPI...
CVE-2023-36526
Missing Authorization vulnerability in Inqsys Technology Duplicate Post Page Menu & Custom Post Type allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Duplicate Post Page Menu & Custom Post Type: from n/a through 2.4.1...
PT-2025-1889
Name of the Vulnerable Software and Affected Versions Duplicate Post, Page and Any Custom Post plugin for WordPress versions up to and including 3.5.3 Description The issue allows authenticated attackers with Contributor-level access and above to extract potentially sensitive data from draft,...
CVE-2024-12538: Exposure of Sensitive Information to an Unauthorized Actor
The Duplicate Post, Page and Any Custom Post plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.5.5 via the 'dppduplicateasdraft' function. This makes it possible for authenticated attackers, with Contributor-level access and above, to...
CVE-2023-36526
Missing Authorization vulnerability in Attinder Singh Duplicate Post Page Menu & Custom Post Type duplicate-post-page-menu-custom-post-type allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Duplicate Post Page Menu & Custom Post Type: from n/a through =...
CVE-2023-36526
Missing Authorization vulnerability in Inqsys Technology Duplicate Post Page Menu & Custom Post Type allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Duplicate Post Page Menu & Custom Post Type: from n/a through 2.4.1...
CVE-2023-36526
CVE-2023-36526 affects the WordPress plugin Duplicate Post Page Menu & Custom Post Type (versions
CVE-2023-36526: Missing Authorization
Missing Authorization vulnerability in Inqsys Technology Duplicate Post Page Menu & Custom Post Type allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Duplicate Post Page Menu & Custom Post Type: from n/a through 2.4.1...
PT-2024-12569 · WordPress · Duplicate Post Page Menu & Custom Post Type
Name of the Vulnerable Software and Affected Versions: Duplicate Post Page Menu & Custom Post Type versions 2.3.1 through 2.4.1 Description: The issue affects the Duplicate Post Page Menu & Custom Post Type plugin, allowing for broken access control due to missing authorization. This enables...
Design/Logic Flaw
The Duplicate Post Page Menu & Custom Post Type plugin for WordPress is vulnerable to unauthorized page and post duplication due to a missing capability check on the duplicateppmcpostasdraft function in versions up to, and including, 2.3.1. This makes it possible for authenticated attackers with...
CVE-2023-4792
The CVE-2023-4792 entry describes a vulnerability in the WordPress plugin Duplicate Post Page Menu & Custom Post Type where a missing capability check in the function duplicate_ppmc_post_as_draft allows authenticated users with subscriber access or higher to duplicate posts/pages. Affected versio...
CVE-2023-4792 Duplicate Post Page Menu & Custom Post Type <= 2.3.1 - Missing Authorization to Post Duplication
The Duplicate Post Page Menu & Custom Post Type plugin for WordPress is vulnerable to unauthorized page and post duplication due to a missing capability check on the duplicateppmcpostasdraft function in versions up to, and including, 2.3.1. This makes it possible for authenticated attackers with...
CVE-2023-4792: Missing Authorization
The Duplicate Post Page Menu & Custom Post Type plugin for WordPress is vulnerable to unauthorized page and post duplication due to a missing capability check on the duplicateppmcpostasdraft function in versions up to, and including, 2.3.1. This makes it possible for authenticated attackers with...
PT-2023-30658
Name of the Vulnerable Software and Affected Versions Duplicate Post Page Menu & Custom Post Type plugin for WordPress versions up to, and including, 2.3.1 Description The issue is related to unauthorized page and post duplication due to a missing capability check on the duplicate ppmc post as...