← Back

Duplicate Post Page Menu & Custom Post Type

duplicate_post_page_menu_&_custom_post_type

Vendor: Inqsys • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-4792
1Inqsys
1Duplicate Post Page Menu & Custom Post Type
Jun 17, 2026
Sep 7, 2023
N/A· v4
4.3 MEDIUM· v3
N/A· v2
The Duplicate Post Page Menu & Custom Post Type plugin for WordPress is vulnerable to unauthorized page and post duplication due to a missing capability check on the duplicate_ppmc_post_as_draft function in versions up t...Show more
The Duplicate Post Page Menu & Custom Post Type plugin for WordPress is vulnerable to unauthorized page and post duplication due to a missing capability check on the duplicate_ppmc_post_as_draft function in versions up to, and including, 2.3.1. This makes it possible for authenticated attackers with subscriber access or higher to duplicate posts and pages.Show less