CVE-2025-32567

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in dev02ali Easy Post Duplicator easy-post-duplicator allows SQL Injection.This issue affects Easy Post Duplicator: from n/a through = 1.0.1...

CVE-2025-32538

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in dev02ali Easy Post Duplicator easy-post-duplicator allows Reflected XSS.This issue affects Easy Post Duplicator: from n/a through = 1.0.1...

CVE-2025-32567 WordPress Easy Post Duplicator Plugin <= 1.0.1 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in dev02ali Easy Post Duplicator allows SQL Injection. This issue affects Easy Post Duplicator: from n/a through 1.0.1...

CVE-2025-32567

CVE-2025-32567: SQL Injection in Easy Post Duplicator (WordPress plugin) affects versions from path up to 1.0.1. Exploitation requires authenticated access (Subscriber). The CVSS v3.1 base score is 8.5 (HIGH) with Network attack vector, Low attack complexity, Privileges required: LOW, User intera...

CVE-2025-32538 WordPress Easy Post Duplicator Plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in dev02ali Easy Post Duplicator allows Reflected XSS. This issue affects Easy Post Duplicator: from n/a through 1.0.1...

CVE-2025-32538

CVE-2025-32538 is a Reflected XSS in the WordPress plugin Easy Post Duplicator (affected: &lt;=1.0.1). Root cause: improper input neutralization during web page generation. CVSS v3.1 base score 7.1 (HIGH) per Patchstack metrics, with network access, low integrity/availability impact, and user int...

CVE-2025-32538 WordPress Easy Post Duplicator Plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in dev02ali Easy Post Duplicator easy-post-duplicator allows Reflected XSS.This issue affects Easy Post Duplicator: from n/a through = 1.0.1...

WordPress plugin Easy Post Duplicator 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-16070 · Unknown · Easy Post Duplicator

Name of the Vulnerable Software and Affected Versions: Easy Post Duplicator versions 1.0.1 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

WordPress plugin Easy Post Duplicator SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A SQL injection...

WordPress Easy Post Duplicator Plugin <= 1.0.1 - SQL Injection vulnerability

SQL Injection vulnerability discovered by thiennv in WordPress Plugin Easy Post Duplicator versions = 1.0.1...

CVE-2025-31809

Cross-Site Request Forgery CSRF vulnerability in Labinator Labinator Content Types Duplicator labinator-content-types-duplicator allows Cross Site Request Forgery.This issue affects Labinator Content Types Duplicator: from n/a through = 1.1.3...

CVE-2025-31845

Cross-Site Request Forgery CSRF vulnerability in Rohit Choudhary Theme Duplicator theme-duplicator allows Cross Site Request Forgery.This issue affects Theme Duplicator: from n/a through = 1.1...

WordPress Theme Duplicator Plugin <= 1.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Abdi Pranata in WordPress Plugin Theme Duplicator versions = 1.1...

WordPress Labinator Content Types Duplicator Plugin <= 1.1.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by astra.r3verii in WordPress Plugin Labinator Content Types Duplicator versions = 1.1.3...

CVE-2025-31845

Cross-Site Request Forgery CSRF vulnerability in Rohit Choudhary Theme Duplicator theme-duplicator allows Cross Site Request Forgery.This issue affects Theme Duplicator: from n/a through = 1.1...

CVE-2025-31809

Cross-Site Request Forgery CSRF vulnerability in Labinator Labinator Content Types Duplicator labinator-content-types-duplicator allows Cross Site Request Forgery.This issue affects Labinator Content Types Duplicator: from n/a through = 1.1.3...

CVE-2025-31845 WordPress Theme Duplicator Plugin <= 1.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Rohit Choudhary Theme Duplicator theme-duplicator allows Cross Site Request Forgery.This issue affects Theme Duplicator: from n/a through = 1.1...

CVE-2025-31845 WordPress Theme Duplicator Plugin <= 1.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Rohit Choudhary Theme Duplicator allows Cross Site Request Forgery. This issue affects Theme Duplicator: from n/a through 1.1...

CVE-2025-31845

CVE-2025-31845 shows a Cross-Site Request Forgery (CSRF) in the Theme Duplicator plugin, affecting versions up to 1.1. The provided documents do not include concrete technical details (vectors, root cause, exploitation, or remediation). Monitor for updates and official advisories for further spec...