WP Post Page Clone <= 1.1 is vulnerable to Unauthorized Post Access vulnerability

Contributor

Published
2021-12-26

The WP Post Page Clone WordPress plugin before 1.2 allows users with a role as low as Contributor to clone and view other users' draft and password-protected posts which they cannot view normally.

CVE

https://www.cve.org/CVERecord?id=CVE-2021-24733

CVSS

Score:3.8

Severity:Low

Version: 1.1

There is a patch available in v1.2 and we strongly recommend you update to this version as soon as possible.