Atec Duplicate Page & Post
Approved changes feed: RSS · Atom
cpe:2.3:a:docjojo:atec_duplicate_page_&_post:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Docjojo (db637476-b0e1-5ad7-93a7-f2c1854ae8cb) |
|---|---|
| Product | Atec Duplicate Page & Post (f99194e9-4b1f-5232-aba3-ca06999e2d9c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-13404 |
vulnerable | 2026-06-08 07:04:32.139804 |
atec Duplicate Page & Post <= 1.2.20 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Duplication and Data Exposure
MEDIUM (5.3)
The atec Duplicate Page & Post plugin for WordPress is vulnerable to unauthorized post duplication due to missing authorization validation on the duplicate_post() function in all versions up to, and including, 1.2.20. This makes it possible for authenticated attackers, with Contributor-level access and above, to duplicate arbitrary posts, including private and password-protected posts, leading to data exposure.
Published: 2025-11-25T07:28:23.547Z
Updated: 2026-04-08T17:13:42.190Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.