CVE-2025-24736

MEDIO 4.3CVE-2025-24736 · Published 24/01/2025 · updated 17/06/2026

En resumen

CVE-2025-24736 es una vulnerabilidad MEDIO (CVSS 4.3) que afecta a post duplicator (metaphorcreations).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.34%, mayor que el 27.9% de las vulnerabilidades.
Solución: actualizar a 2.36 o posterior.

Package	Affected versions	Patched versions
post duplicator metaphorcreations	`< 2.36`	`2.36`

Description

Missing Authorization vulnerability in metaphorcreations Post Duplicator post-duplicator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Duplicator: from n/a through <= 2.35.

References

patchstack.com/database/Wordpress/Plugin/post-duplicator/vulnerability/wordpress-post-duplicator-plugin-2-35-broken-access-control-vulnerability · Third Party Advisory

Más vulnerabilidades de post duplicator

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

post duplicator

metaphorcreations

< 2.36

2.36

Más vulnerabilidades de post duplicator

Ver todo →