Skip to content
OpenAdvisories

Vendor

docjojo

4 known vulnerabilities.

Products

atec Debug 3 atec Duplicate Page & Post 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2025-13404

    atec Duplicate Page & Post <= 1.2.20 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Duplication and Data Exposure

    The atec Duplicate Page & Post plugin for WordPress is vulnerable to unauthorized post duplication due to missing authorization validation on the duplicate_post() function in all versions up to, and including, 1.2.20. This makes it possible for authenticated …

    docjojo atec Duplicate Page & Post Web / CMS
  • Medium 4.9
    CVE-2025-9516

    atec Debug <= 1.2.22 - Authenticated (Administrator+) Arbitrary File Read

    The atec Debug plugin for WordPress is vulnerable to arbitrary file read in all versions up to, and including, 1.2.22 via the 'custom_log' parameter. This makes it possible for authenticated attackers, with Administrator-level access and above, to view the co…

    docjojo atec Debug Web / CMS