CVE-2023-2229

Summary

CVE-2023-2229 is a vulnerability affecting the Quick Post Duplicator plugin for WordPress. This issue allows authenticated attackers with contributor-level privileges to inject SQL queries through the 'post_id' parameter, due to insufficient escaping and inadequate query preparation. Consequently, sensitive information can be extracted from the database. WordPress users are advised to update the plugin to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.