CVE-2021-43408

Summary (CVE-2021-43408) : The WordPress plugin “Duplicate Post” (versions up to 1.1.9) is vulnerable to SQL Injection via an authenticated user with plugin access. The root cause is improper sanitization/escaping of SQL statements when the cdp_action_handling AJAX action processes the id paramet...

CVE-2014-10379

CVE-2014-10379 affects the WordPress WordPress Duplicate Post plugin. The connected documents consistently describe a SQL injection vulnerability in the plugin’s code path related to the duplication feature, with the plugin version before 2.6 identified as affected. The root cause is a SQL inject...

CVE-2014-10378

CVE-2014-10378 affects the WordPress duplicate-post plugin. The vulnerable component is the duplicate-post plugin prior to version 2.6, with a cross-site scripting (XSS) flaw that could allow an attacker to execute client-side code in a victim’s browser. The provided documents do not include expl...