Lucene search

K
wpvulndbWpvulndbWPVDB-ID:AD52FC51-4EE2-4A74-B3F2-E6CC89822CCB
HistorySep 07, 2023 - 12:00 a.m.

Duplicate Post Page Menu & Custom Post Type < 2.4.0 - Subscriber+ Post Duplication

2023-09-0700:00:00
wpscan.com
5
unauthorized duplication
missing capability check
authenticated attackers
subscriber access
higher

6.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.4%

Description The plugin is vulnerable to unauthorized page and post duplication due to a missing capability check on the duplicate_ppmc_post_as_draft function in versions up to, and including, 2.3.1. This makes it possible for authenticated attackers with subscriber access or higher to duplicate posts and pages.

CPENameOperatorVersion
eq2.4.0

6.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.4%

Related for WPVDB-ID:AD52FC51-4EE2-4A74-B3F2-E6CC89822CCB