Lucene search
Apple502jWPVDB-ID:A7FA5896-5A1D-44C6-985C-E4ABCC53DA0EHistoryDec 27, 2021 - 12:00 a.m.
WP Post Page Clone < 1.2 - Unauthorised Post Access
2021-12-2700:00:00
apple502j
wpscan.com
8
0.001 Low
EPSS
Percentile
24.8%
The plugin allows users with a role as low as Contributor to clone and view other users’ draft and password-protected posts which they cannot view normally.
PoC
Go to All Posts, find the post to clone, click “Click to Clone” then edit the cloned post to see its content
| CPE | Name | Operator | Version |
|---|---|---|---|
| wp-post-page-clone | lt | 1.2 |
Related
wpexploit
wpexploit
WP Post Page Clone < 1.2 - Unauthorised Post Access
2021-12-27 00:00:00
cve
cve
CVE-2021-24733
2022-01-24 08:15:08
cvelist
cvelist
CVE-2021-24733 WP Post Page Clone < 1.2 - Unauthorised Post Access
2022-01-24 08:00:49
patchstack
patchstack
nvd
nvd
CVE-2021-24733
2022-01-24 08:15:08
cnvd
cnvd
WordPress WP Post Page Clone plugin access control error vulnerability
2022-01-26 00:00:00
prion
prion
Default credentials
2022-01-24 08:15:00