CVE-2023-4792

Summary

CVE-2023-4792: A vulnerability affects the Duplicate Post Page Menu & Custom Post Type plugin for WordPress. This issue stems from a missing capability check on the function "duplicate_ppmc_post_as_draft" in versions up to 2.3.1. As a result, authenticated attackers with subscriber access or higher can exploit this vulnerability to duplicately create posts and pages, posing a potential security risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.