Missing Authorization Exposure in Evan Herman Post Cloner Plugin

CVE-2025-62865

What is CVE-2025-62865?

A missing authorization vulnerability has been identified in the Evan Herman Post Cloner, specifically allowing unauthenticated users to exploit incorrectly configured access control settings. This can lead to unauthorized access to sensitive functionalities and data. The issue affects the Post Cloner plugin from its initial version up to and including 1.0.0, posing significant risks to active installations if not addressed. Users are advised to review their access control configurations and update to a patched version to mitigate potential exploitation.

References