Sync Post With Other Site, CVE-2024-6709

CVE, Research URL: CVE-2024-6709
Home page URL: Security reports for Sync Post With Other Site
Application: Sync Post With Other Site
Published on: Aug 03, 2024
Research Description: The Sync Post With Other Site plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'sps_add_update_post' function in all versions up to, and including, 1.6. This makes it possible for authenticated attackers, with Subscriber-level access and above, to create new draft posts and update existing posts.
Affected versions: max 1.7.
Status: vulnerable