CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
What the vulnerability does
Cross-Site Request Forgery (CSRF) vulnerability in Rajesh Kumar WP Bulk Post Duplicator wp-bulk-post-duplicator allows Cross Site Request Forgery.This issue affects WP Bulk Post Duplicator: from n/a through <= 1.2.
Explanation of Vulnerability in Simple Terms
WP Bulk Post Duplicator versions 1.2 and earlier are vulnerable to cross-site request forgery (CSRF). An attacker can craft a malicious webpage that, when visited by a logged-in site administrator, performs unwanted actions such as duplicating posts without the admin's knowledge or consent. The vulnerability requires the admin to visit the attacker's page while authenticated to the WordPress site.
What an attacker can do
Trick a logged-in admin into duplicating posts or performing other plugin actions without their consent.
Potential impact on your site
Attackers can manipulate post content and site structure through tricked administrators without explicit authorization.
Conditions required to exploit
Admin must visit attacker's malicious webpage while logged into WordPress.
Key dates
External resources
Related vulnerabilities
