Duplicate Post Project

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Duplicate Post Project records in CISA KEV

No Duplicate Post Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records in Duplicate Post · all components

TI-2021-19350 CVE-2021-43408 · GHSA-p6r2-qh95-8h4m

MEDIUM 50

The "Duplicate Post" WordPress plugin up to and including version 1.1.9 is vulnerable to SQL Injection.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.09657 Published 2021-11-19 Fixed in 1.2.0 CWE-89

TI-2014-08241 CVE-2014-10379 · GHSA-hwcj-x473-vh4g

MEDIUM 46

The duplicate-post plugin before 2.6 for WordPress has SQL injection.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01795 Published 2019-08-21 No fix listed CWE-89

TI-2014-08240 CVE-2014-10378 · GHSA-g9g5-997j-xvxx

LOW 29

The duplicate-post plugin before 2.6 for WordPress has XSS.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00913 Published 2019-08-21 No fix listed CWE-79