Lucene search
+L

167 matches found

CVE
CVE
•added 2025/01/11 2:20 a.m.•62 views

CVE-2024-12472

CVE-2024-12472 affects the WordPress Post Duplicator plugin. Reports indicate information exposure via mtphr_duplicate_post() in all versions up to 2.36, enabling authenticated attackers with Contributor+ rights to duplicate posts and access data from password‑protected, private, or draft posts. ...

4.3CVSS7.2AI score0.00309EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2025/01/11 2:20 a.m.•13 views

CVE-2024-12472 Post Duplicator <= 2.36 - Authenticated (Contributor+) Protected Post Disclosure

The Post Duplicator plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.36 via the mtphrduplicatepost function due to insufficient restrictions on which posts can be duplicated. This makes it possible for authenticated attackers, with Contributor-lev...

4.3CVSS7.2AI score0.00309EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/01/11 2:20 a.m.•34 views

CVE-2024-12472 Post Duplicator <= 2.36 - Authenticated (Contributor+) Protected Post Disclosure

The Post Duplicator plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.36 via the mtphrduplicatepost function due to insufficient restrictions on which posts can be duplicated. This makes it possible for authenticated attackers, with Contributor-lev...

4.3CVSS0.00309EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/01/11 12:00 a.m.•22 views

WordPress plugin Post Duplicator 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.3CVSS7.8AI score0.00309EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/01/11 12:00 a.m.•22 views

PT-2025-1861 · WordPress · Post Duplicator

Name of the Vulnerable Software and Affected Versions: Post Duplicator plugin for WordPress version 2.36 and earlier Description: The issue is related to Information Exposure due to insufficient restrictions on which posts can be duplicated, making it possible for authenticated attackers with...

5.3CVSS7.1AI score0.00309EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/11 12:00 a.m.•3 views

CVE-2024-12472: Authorization Bypass Through User-Controlled Key

The Post Duplicator plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.36 via the mtphrduplicatepost function due to insufficient restrictions on which posts can be duplicated. This makes it possible for authenticated attackers, with Contributor-lev...

4.3CVSS5.7AI score0.00309EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/01/10 8:58 p.m.•22 views

WordPress Post Duplicator plugin <= 2.36 - Authenticated (Contributor+) Protected Post Disclosure vulnerability

Authenticated Contributor+ Protected Post Disclosure vulnerability discovered by Webbernaut in WordPress Plugin Post Duplicator versions = 2.36...

5.3CVSS7AI score0.00309EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2024/12/09 1:15 p.m.•15 views

CVE-2023-49835

Missing Authorization vulnerability in Metaphor Creations Post Duplicator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Duplicator: from n/a through 2.31...

4.3CVSS5.8AI score0.0042EPSS
SaveExploits0References1
NVD
NVD
•added 2024/12/09 1:15 p.m.•20 views

CVE-2023-49835

Missing Authorization vulnerability in Metaphor Creations Post Duplicator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Duplicator: from n/a through 2.31...

4.3CVSS0.0042EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2024/12/09 1:15 p.m.•42 views

CVE-2023-31214

Missing Authorization vulnerability in Arul Prasad J WP Quick Post Duplicator wp-quick-post-duplicator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Quick Post Duplicator: from n/a through = 2.0...

5.4CVSS5.8AI score0.00346EPSS
SaveExploits0References3
NVD
NVD
•added 2024/12/09 1:15 p.m.•22 views

CVE-2023-31214

Missing Authorization vulnerability in Arul Prasad J WP Quick Post Duplicator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Quick Post Duplicator: from n/a through 2.0...

5.4CVSS0.00346EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/12/09 11:30 a.m.•19 views

CVE-2023-31214 WordPress WP Quick Post Duplicator plugin <= 2.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Arul Prasad J WP Quick Post Duplicator wp-quick-post-duplicator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Quick Post Duplicator: from n/a through = 2.0...

5.4CVSS8.3AI score0.00346EPSS
SaveExploits0References1
CVE
CVE
•added 2024/12/09 11:30 a.m.•46 views

CVE-2023-31214

CVE-2023-31214 affects WordPress WP Quick Post Duplicator

5.4CVSS8.5AI score0.00346EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/12/09 11:30 a.m.•13 views

CVE-2023-49835 WordPress Post Duplicator plugin <= 2.31 - Broken Access Control vulnerability

Missing Authorization vulnerability in Metaphor Creations Post Duplicator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Duplicator: from n/a through 2.31...

4.3CVSS6.9AI score0.0042EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/12/09 11:30 a.m.•29 views

CVE-2023-49835 WordPress Post Duplicator plugin <= 2.31 - Broken Access Control vulnerability

Missing Authorization vulnerability in Metaphor Creations Post Duplicator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Duplicator: from n/a through 2.31...

4.3CVSS0.0042EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/12/09 12:00 a.m.•12 views

WordPress plugin WP Quick Post Duplicator 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.4CVSS8.8AI score0.00346EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/12/09 12:00 a.m.•12 views

PT-2024-12263 · WordPress · Wp Quick Post Duplicator

Name of the Vulnerable Software and Affected Versions: WP Quick Post Duplicator versions 2.0 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploitation of incorrectly configured access control security levels. Recommendations: For WP Quick Po...

5.4CVSS9.5AI score0.00346EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/09 12:00 a.m.•3 views

CVE-2023-31214: Missing Authorization

Missing Authorization vulnerability in Arul Prasad J WP Quick Post Duplicator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Quick Post Duplicator: from n/a through 2.0...

5.4CVSS8.3AI score0.00346EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/12/09 12:00 a.m.•14 views

PT-2024-13812 · Metaphor Creations · Post Duplicator

Name of the Vulnerable Software and Affected Versions: Metaphor Creations Post Duplicator versions through 2.31 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions...

4.3CVSS9.2AI score0.0042EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2024/12/09 12:00 a.m.•18 views

WordPress plugin Post Duplicator 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

4.3CVSS8.7AI score0.0042EPSS
SaveExploits0References1
Rows per page
Query Builder