CVE-2023-36526 — WordPress Duplicate Post Page Menu & Custom Post Type plugin <= 2.4.1 - Broken Access Control vulnerability

CVE-2023-36526

WordPress Duplicate Post Page Menu & Custom Post Type plugin <= 2.4.1 - Broken Access Control vulnerability PUBLISHED

Description (CNA)

Missing Authorization vulnerability in Inqsys Technology Duplicate Post Page Menu & Custom Post Type allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Duplicate Post Page Menu & Custom Post Type: from n/a through 2.4.1.

Affected (CNA)

Vendor / product	Versions
Inqsys Technology / Duplicate Post Page Menu & Custom Post Type	affected n/a through 2.4.1

CWE

CWE-862

References

https://patchstack.com/database/wordpress/plugin/duplicate-post-page-menu-custom-post-type/vulnerability/wordpress-duplicate-post-page-menu-custom-post-type-plugin-2-3-1-broken-access-control?_s_id=cve

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.