Vulnerabilities

TI-2021-19350 CVE-2021-43408 · GHSA-p6r2-qh95-8h4m

Duplicate Post WordPress Plugin SQL Injection Vulnerability

MEDIUM 50

The "Duplicate Post" WordPress plugin up to and including version 1.1.9 is vulnerable to SQL Injection.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.09657 Published 2021-11-19 Fixed in 1.2.0 CWE-89

TI-2014-08240 CVE-2014-10378 · GHSA-g9g5-997j-xvxx

LOW 29

The duplicate-post plugin before 2.6 for WordPress has XSS.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00913 Published 2019-08-21 No fix listed CWE-79

TI-2014-08241 CVE-2014-10379 · GHSA-hwcj-x473-vh4g

MEDIUM 46

The duplicate-post plugin before 2.6 for WordPress has SQL injection.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01795 Published 2019-08-21 No fix listed CWE-89