CyberRota Analysis
AI-GeneratedThe WC Fields Factory WordPress plugin prior to version 4.1.11 is vulnerable due to inadequate access controls and nonce verification during post-cloning actions. This flaw allows Contributor-level users and above to duplicate any post, including private and draft content from other users, potentially exposing sensitive information. WordPress site administrators, especially those with Contributor-level users, should prioritize updating to the latest version to mitigate this risk.
Original NVD Description
The WC Fields Factory WordPress plugin before 4.1.11 does not properly restrict access to, or verify a nonce for, a post-cloning action, allowing Contributor-level users and above to duplicate arbitrary posts of any type or status, including other users' private or draft content, and gain read access to the resulting copy.