CVE-2023-47754CWE-862

WordPress Delete Duplicate Posts Plugin <= 4.8.9 is vulnerable to Broken Access Control

Medium · published December 18, 2023

CVSS v3.1
4.3
EPSS
1%
Percentile
42.6
In the wild
Unconfirmed
What it is

Missing Authorization vulnerability in Clever plugins Delete Duplicate Posts allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Delete Duplicate Posts: from n/a through 4.8.9.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00509 · 42.6th percentile
Weakness
CWE-862 · Missing Authorization
Published
2023-12-18T23:49Z
EPSS history
Timeline
  • 18 DEC 23:49Z
    WordPress Delete Duplicate Posts Plugin <= 4.8.9 is vulnerable to Broken Access Control
    cvelistv5