CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in metaphorcreations Post Duplicator post-duplicator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Duplicator: from n/a through <= 2.35.
Explanation of Vulnerability in Simple Terms
Post Duplicator versions 2.35 and earlier lack proper authorization checks, allowing authenticated users with low privileges to modify content they should not have access to. The vulnerability requires a valid user account but no special interaction. Site administrators should update to a version newer than 2.35 to prevent unauthorized content changes.
What an attacker can do
Modify content or settings they lack permission to change.
Potential impact on your site
Unauthorized users can alter posts, pages, or plugin settings without proper permission checks.
Conditions required to exploit
Valid user account with low-level privileges; network access to the site.
Key dates
External resources
Related vulnerabilities
