Incorrect Access Control Security Levels Expose Clone to Missing Authorization Vulnerability

CVE-2023-25486

Summary

An authorization flaw exists in the Migrate Clone functionality of the WP Clone plugin, exposing users to potential unauthorized access due to improper configuration of security levels. This issue affects versions from n/a up to 2.3.7 of the WP Clone plugin, potentially allowing attackers to exploit security weaknesses and gain elevated privileges without proper authorization. Web administrators are urged to evaluate their installations for this vulnerability and implement necessary security measures.

References