Duplicate Post Project Security Vulnerabilities

CVE-2014-10378

The duplicate-post plugin before 2.6 for WordPress has XSS.

CVE-2014-10379

The duplicate-post plugin before 2.6 for WordPress has SQL injection.

CVE-2021-43408

The "Duplicate Post" WordPress plugin up to and including version 1.1.9 is vulnerable to SQL Injection. SQL injection vulnerabilities occur when client supplied data is included within an SQL Query insecurely. SQL Injection can typically be exploited to read, modify and delete SQL table data. In ma...