PT-2025-16070 · Unknown · Easy Post Duplicator

Name of the Vulnerable Software and Affected Versions: Easy Post Duplicator versions 1.0.1 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

WordPress Easy Post Duplicator Plugin <= 1.0.1 - SQL Injection vulnerability

SQL Injection vulnerability discovered by thiennv in WordPress Plugin Easy Post Duplicator versions = 1.0.1...

CVE-2025-28884

Cross-Site Request Forgery CSRF vulnerability in Rajesh Kumar WP Bulk Post Duplicator wp-bulk-post-duplicator allows Cross Site Request Forgery.This issue affects WP Bulk Post Duplicator: from n/a through = 1.2...

WordPress WP Bulk Post Duplicator plugin <= 1.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin WP Bulk Post Duplicator versions = 1.2...

CVE-2025-28884

Cross-Site Request Forgery CSRF vulnerability in Rajesh Kumar WP Bulk Post Duplicator wp-bulk-post-duplicator allows Cross Site Request Forgery.This issue affects WP Bulk Post Duplicator: from n/a through = 1.2...

CVE-2025-28884 WordPress WP Bulk Post Duplicator plugin <= 1.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Rajesh Kumar WP Bulk Post Duplicator wp-bulk-post-duplicator allows Cross Site Request Forgery.This issue affects WP Bulk Post Duplicator: from n/a through = 1.2...

CVE-2025-28884

CVE-2025-28884 is a CSRF vulnerability in the WordPress plugin WP Bulk Post Duplicator, affecting versions up to 1.2. Public data confirms the issue exists but does not provide exploit details. The CVSS v3.1 base score is 4.3 (Medium), with impact limited to integrity and no confidentiality/avail...

WordPress plugin WP Bulk Post Duplicato 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

CVE-2025-24736

Missing Authorization vulnerability in Metaphor Creations Post Duplicator allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Post Duplicator: from n/a through 2.35...

CVE-2025-24736

Missing Authorization vulnerability in metaphorcreations Post Duplicator post-duplicator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Duplicator: from n/a through = 2.35...

CVE-2025-24736 WordPress Post Duplicator plugin <= 2.35 - Broken Access Control vulnerability

Missing Authorization vulnerability in metaphorcreations Post Duplicator post-duplicator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Duplicator: from n/a through = 2.35...

CVE-2025-24736

CVE-2025-24736 : Missing Authorization vulnerability in the WordPress plugin Post Duplicator (Metaphor Creations). Affected: Post Duplicator versions n/a through 2.35. Root cause: misconfigured access control allowing unauthorized actions. Impact: described as broken/insufficient authorization wi...

WordPress Post Duplicator plugin <= 2.35 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Mika in WordPress Plugin Post Duplicator versions = 2.35...

PT-2025-5549 · Metaphor Creations · Post Duplicator

Name of the Vulnerable Software and Affected Versions: Metaphor Creations Post Duplicator versions n/a through 2.35 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For...

WordPress plugin Post Duplicator 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2024-12472

The Post Duplicator plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.36 via the mtphrduplicatepost due to insufficient restrictions on which posts can be duplicated. This makes it possible for authenticated attackers, with Contributor-level access...

CVE-2024-12472

The Post Duplicator plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.36 via the mtphrduplicatepost function due to insufficient restrictions on which posts can be duplicated. This makes it possible for authenticated attackers, with Contributor-lev...

CVE-2024-12472

CVE-2024-12472 affects the WordPress Post Duplicator plugin. Reports indicate information exposure via mtphr_duplicate_post() in all versions up to 2.36, enabling authenticated attackers with Contributor+ rights to duplicate posts and access data from password‑protected, private, or draft posts. ...

CVE-2024-12472 Post Duplicator <= 2.36 - Authenticated (Contributor+) Protected Post Disclosure

The Post Duplicator plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.36 via the mtphrduplicatepost function due to insufficient restrictions on which posts can be duplicated. This makes it possible for authenticated attackers, with Contributor-lev...

CVE-2024-12472 Post Duplicator <= 2.36 - Authenticated (Contributor+) Protected Post Disclosure

The Post Duplicator plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.36 via the mtphrduplicatepost function due to insufficient restrictions on which posts can be duplicated. This makes it possible for authenticated attackers, with Contributor-lev...