CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
What the vulnerability does
Missing Authorization vulnerability in Muhammad Rehman Remove Duplicate Posts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Remove Duplicate Posts: from n/a through 1.3.5.
Explanation of Vulnerability in Simple Terms
The Remove Duplicate Posts plugin for WordPress contains a missing authorization check that allows authenticated users with low privileges to read, modify, or delete data they should not have access to. An attacker with a basic user account can exploit this flaw to access sensitive information or alter site content without proper permission controls.
What an attacker can do
Read, modify, or delete data without proper authorization checks.
Potential impact on your site
Unauthorized users can access, modify, or delete posts and data they should not be able to touch.
Conditions required to exploit
Attacker must have a low-privilege WordPress user account (e.g., subscriber or contributor).
Key dates
External resources
Related vulnerabilities
