CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in Arul Prasad J WP Quick Post Duplicator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Quick Post Duplicator: from n/a through 2.0.
Explanation of Vulnerability in Simple Terms
WP Quick Post Duplicator through version 2.0 fails to properly check user permissions before allowing post duplication. A logged-in user with low privileges can duplicate posts they should not have access to, potentially reading or modifying content intended for higher-privilege users. Update to a version newer than 2.0.
What an attacker can do
Duplicate posts without proper permission checks, accessing or modifying restricted content.
Potential impact on your site
Low-privilege users can bypass content access controls and duplicate sensitive posts.
Conditions required to exploit
Attacker must be logged in as a low-privilege user (e.g., subscriber or contributor).
Key dates
External resources
Related vulnerabilities
