Arjun Thakur

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Arjun Thakur records in CISA KEV

No Arjun Thakur vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-36272 CVE-2026-49046 · GHSA-qf22-3mph-6276

WordPress Duplicate Page and Post plugin <= 2.9.5 - SQL Injection vulnerability

LOW 37

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Arjun Thakur Duplicate Page and Post allows Blind SQL Injection.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00303 Published 2026-05-27 No fix listed CWE-89

TI-2025-05598 CVE-2025-6189 · GHSA-vf6m-m64h-gj5j

Duplicate Page and Post <= 2.9.5 - Authenticated (Contributor+) SQL Injection via meta_key Parameter

LOW 29

The Duplicate Page and Post plugin for WordPress is vulnerable to time-based SQL Injection via the ‘meta_key’ parameter in all versions up to, and including, 2.9.5 due to insufficient escaping on the user supplied parame…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00304 Published 2025-09-10 No fix listed CWE-89

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0