Duplicate Post Privilege Escalation in Smart Post WordPress Plugin

Executive Summary

This vulnerability is an Insecure Direct Object Reference (IDOR) flaw in the Smart Post WordPress plugin versions before 4.0.8. It allows users with contributor-level access or higher to duplicate and access private or password-protected posts without proper authorization checks. The plugin fails to verify post type, ownership, or status when duplicating posts, enabling attackers to copy sensitive content into their own drafts and read metadata.

Useful 0 Not Useful 0

Detection Guidance

Check if the Post Carousel plugin is installed and verify its version. If it is between 4.0.0 and 4.0.7, the system is vulnerable. Look for unauthorized post duplications or drafts created by users with contributor privileges or higher.

Useful 0 Not Useful 0

Impact Analysis

If you use the affected Smart Post plugin versions, an attacker with contributor access could read private or password-protected posts, including sensitive content and metadata. This could lead to unauthorized data exposure, privacy breaches, or information leaks within your WordPress site.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could violate GDPR by exposing personal data in private posts without authorization. For HIPAA, it may risk unauthorized access to protected health information if such posts exist. Compliance requires ensuring only authorized users access sensitive data, which this flaw undermines.

Useful 0 Not Useful 0

Mitigation Strategies

Update the Post Carousel plugin to version 4.0.8 or later immediately. Remove any suspicious drafts created by unauthorized users and review user permissions to ensure contributors do not have excessive access.

Useful 0 Not Useful 0