CyberRota Analysis
AI-GeneratedThe Smart Post WordPress plugin prior to version 4.0.8 is vulnerable as it fails to validate the type, ownership, or status of posts during duplication, enabling users with contributor privileges and higher to replicate private or password-protected posts into their own drafts. This flaw can lead to unauthorized access to sensitive content and metadata, posing a significant privacy risk. WordPress site administrators and developers using this plugin should prioritize updating to the latest version to mitigate potential data exposure.
Original NVD Description
The Smart Post WordPress plugin before 4.0.8 does not check the type, ownership or status of the post it is asked to duplicate, allowing users with contributor privileges and above to copy any private or password protected post into a draft of their own and read its content and metadata.