CVE-2024-12472

Summary

CVE-2024-12472 is a newly identified Information Exposure vulnerability in the Post Duplicator plugin for WordPress. This issue affects all versions up to and including 2.36. The vulnerability lies within the mtphr_duplicate_post() function, which imposes insufficient restrictions on the posts that can be duplicated. Consequently, authenticated attackers with Contributor-level access or higher can exploit this weakness to extract data from password-protected, private, or draft posts that they should not have permission to access. By duplicating these posts, attackers can gain unauthorized access to sensitive information.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.