The vulnerability exists in the Pricing Table WordPress Plugin for versions older than 4.1.3. Because the plugin does not enforce authorization checks when duplicating a legacy pricing table any user with the contributor role or higher can clone and publish any post or page on the site, including private or draft content belonging to other users. This flaw allows an attacker to publish confidential content without permission, compromising confidentiality and integrity of site data.

All installations of the Easy Pricing Tables WordPress Plugin (also referred to as the Pricing Table WordPress Plugin) with a version less than 4.1.3 are affected. The issue is present in any WordPress site that has this plugin enabled and is using one of the vulnerable versions.

The attack vector is local to the WordPress site; it requires an authenticated user with at least contributor permissions. The lack of authentication checks makes the vulnerability straightforward to exploit, allowing an attacker to duplicate and publish any content from other users. While the EPSS score is not available and the vulnerability is not listed in CISA’s KEV catalog, the ability to forcibly publish private content represents a severe impact in terms of confidentiality breach and potential for misinformation. The risk is considered high, especially on sites that host sensitive or private posts and where contributor accounts may be widely accessible.