CVE-2014-10378

The duplicate-post plugin before 2.6 for WordPress has XSS...

Cross site scripting

The duplicate-post plugin before 2.6 for WordPress has XSS...

Sql injection

The duplicate-post plugin before 2.6 for WordPress has SQL injection...

CVE-2014-10379

CVE-2014-10379 affects the WordPress WordPress Duplicate Post plugin. The connected documents consistently describe a SQL injection vulnerability in the plugin’s code path related to the duplication feature, with the plugin version before 2.6 identified as affected. The root cause is a SQL inject...

CVE-2014-10378: Improper Neutralization of Input During Web Page Generation

The duplicate-post plugin before 2.6 for WordPress has XSS...

CVE-2014-10379: Improper Neutralization of Special Elements used in an SQL Command

The duplicate-post plugin before 2.6 for WordPress has SQL injection...

Duplicate Post 2.5 - options-general.php post Parameter Reflected XSS

The Yoast Duplicate Post WordPress plugin was affected by an options-general.php post Parameter Reflected XSS security vulnerability...

Duplicate Post 2.5 - duplicate-post-admin.php User Login Cookie Value SQL Injection

The Yoast Duplicate Post WordPress plugin was affected by a duplicate-post-admin.php User Login Cookie Value SQL Injection security vulnerability...

WordPress Duplicate Post Plugin <= 2.5 - SQL Injection

This plugin is prone to an SQL injection in duplicate-post-admin.php. Solution Upgrade the plugin...

WordPress Duplicate Post Plugin <= 2.5 - Reflected XSS

This plugin is prone to a reflected XSS in options-general.php post parameter. Solution Update the plugin...