Vulnerabilities > Carlosfazenda

DATE CVE VULNERABILITY TITLE RISK
2024-06-29 CVE-2024-5942 Authorization Bypass Through User-Controlled Key vulnerability in Carlosfazenda Page and Post Clone
The Page and Post Clone plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 6.0 via the 'content_clone' function due to missing validation on a user controlled key.
network
low complexity
carlosfazenda CWE-639
5.4