Lucene search

K
wpvulndbWpvulndbWPVDB-ID:69CF5994-C0EA-423B-BCF5-E59D858B84DA
HistoryMay 07, 2024 - 12:00 a.m.

Exclusive Addons Elementor < 2.6.9.2 - Missing Authorization to Post Duplication

2024-05-0700:00:00
wpscan.com
5
wordpress
vulnerability
unauthorized access.

6.2 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

8.7%

Description The Exclusive Addons Elementor plugin for WordPress is vulnerable to unauthorized access of datadue to an insufficient capability check on the duplicate_post() function in versions up to, and including, 2.6.9.1. This makes it possible for authenticated attackers, with contributor-level access and above, to duplicate other users posts which can lead to information disclosure for private posts.

CPENameOperatorVersion
eq2.6.9.2

6.2 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

8.7%

Related for WPVDB-ID:69CF5994-C0EA-423B-BCF5-E59D858B84DA