3 matches found
CVE-2021-43408
The "Duplicate Post" WordPress plugin up to and including version 1.1.9 is vulnerable to SQL Injection. SQL injection vulnerabilities occur when client supplied data is included within an SQL Query insecurely. SQL Injection can typically be exploited to read, modify and delete SQL table data. In ma...
CVE-2014-10379
The duplicate-post plugin before 2.6 for WordPress has SQL injection.
CVE-2014-10378
The duplicate-post plugin before 2.6 for WordPress has XSS.