CVE-2024-1368 is a missing authorization vulnerability in the samuelkwle Page Duplicator WordPress plugin, affecting all versions up to 0.1.1. The duplicate_dat_page() function lacks capability checks, enabling unauthenticated users to duplicate posts and pages arbitrarily. This can lead to unauthorized modification of site content. The vulnerability has a CVSS 3.1 base score of 5.3 (medium severity) with network attack vector, low attack complexity, no privileges required, and no user interaction needed. No patch or remediation guidance is currently available from the vendor.

The vulnerability allows unauthenticated attackers to duplicate arbitrary posts and pages on a WordPress site using the affected plugin. While it does not directly impact confidentiality or availability, it results in unauthorized modification of site content (integrity impact). There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider disabling or removing the Page Duplicator plugin if it is not essential. Monitor for updates from the plugin author or WordPress plugin repository for a security update addressing this issue.