CVE-2021-33852

CVE-2021-33852 concerns the WordPress Post Duplicator plugin (versions affected prior to 2.27). The issue is a stored XSS caused by insufficient sanitization of the Duplicate Title/Slug fields, allowing a crafted payload to execute JavaScript in a user’s browser when the Settings page or applicat...

CVE-2025-24736

CVE-2025-24736 : Missing Authorization vulnerability in the WordPress plugin Post Duplicator (Metaphor Creations). Affected: Post Duplicator versions n/a through 2.35. Root cause: misconfigured access control allowing unauthorized actions. Impact: described as broken/insufficient authorization wi...

CVE-2023-49835

CVE-2023-49835 affects the WordPress plugin Post Duplicator (versions up to 2.31). The issue is described as a Missing Authorization / Broken Access Control vulnerability allowing unauthorized access due to incorrectly configured access control. The vulnerability and its CVE are corroborated by P...

CVE-2024-12472

CVE-2024-12472 affects the WordPress Post Duplicator plugin. Reports indicate information exposure via mtphr_duplicate_post() in all versions up to 2.36, enabling authenticated attackers with Contributor+ rights to duplicate posts and access data from password‑protected, private, or draft posts. ...

CVE-2016-15027

CVE-2016-15027 affects the WordPress meta4creations Post Duplicator Plugin (v2.18). The vulnerability is in the function mtphr_post_duplicator_notice within includes/notices.php, where manipulation of the argument post-duplicated enables cross-site scripting. It can be exploited remotely. The iss...