Duplicate Post Page Menu Custom Post Type Vulnerabilities

The Duplicate Post Page Menu & Custom Post Type plugin for WordPress is vulnerable to unauthorized page and post duplication due to a missing capability check on the duplicate_ppmc_post_as_draft function in versions up to, and including, 2.3.1. This makes it possible for authenticated attackers with subscriber access o...

CVSS:

4.3

Affected:

up to 2.3.1

Fixed in:

2.4.0

Disclosed:

Sep 6, 2023

CVE-2023-4792 on NVD →

The Duplicate Post Page Menu & Custom Post Type plugin for WordPress is vulnerable to unauthorized use of functionality due to a missing capability check on the duplicate_ppmc_menu_maker function in versions up to, and including, 2.3.1. This makes it possible for authenticated attackers, with subscriber-level access an...

CVSS:

4.3

Affected:

up to 2.3.1

Fixed in:

2.4.0

Disclosed:

Jun 27, 2023

CVE-2023-36526 on NVD →