CVSS: 4.3EPSS: %CPEs: 1EXPL: 0CVE-2023-49835 – Post Duplicator <= 2.31 - Missing Authorization via mtphr_duplicate_post
https://notcve.org/view.php?id=CVE-2023-49835
The Post Duplicator plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the mtphr_duplicate_post function in versions up to, and including, 2.31. This makes it possible for authenticated attackers, with contributor-level access and above, to publish posts upon duplication. • CWE-862: Missing Authorization •
CVSS: 5.4EPSS: %CPEs: 1EXPL: 0CVE-2023-31214 – WP Quick Post Duplicator <= 2.0 - Missing Authorization
https://notcve.org/view.php?id=CVE-2023-31214
The WP Quick Post Duplicator plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the apj_duplicate_post_as_a_draft() function in versions up to, and including, 2.0. This makes it possible for authenticated attackers, with contributor-level access and above, to duplicate arbitrary posts that may have protected content. • CWE-862: Missing Authorization •