WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
dupeoff
Published
2023-02-13
Title
DupeOff <= 1.6 - Admin+ Stored XSS
Slug
duplica
Published
2024-07-18
Title
Duplica < 0.7 - Authenticated (Subscriber+) Missing Authorization to Users/Posts Duplicates Creation
Slug
duplicate-content-cure
Published
2025-11-29
Title
Duplicate Content Cure <= 1.0 - Cross-Site Request Forgery
Slug
duplicate-page
Published
2019-04-05
Title
Duplicate Page < 3.4 - Authenticated SQL Injection
Slug
duplicate-page
Published
2021-08-28
Title
Duplicate Page < 4.4.3 - Admin+ Stored Cross-Site Scripting
Slug
duplicate-page-and-post
Published
2017-12-28
Title
Duplicate Page and Post 2.1.0-2.1.1 (current) - Backdoored
Slug
duplicate-page-or-post
Published
2022-01-24
Title
Duplicate Page or Post < 1.5.1 - Arbitrary Settings Update to Stored XSS
Slug
duplicate-post
Published
2014-08-01
Title
Duplicate Post 2.5 - duplicate-post-admin.php User Login Cookie Value SQL Injection
Slug
duplicate-post
Published
2014-08-01
Title
Duplicate Post 2.5 - options-general.php post Parameter Reflected XSS
Slug
duplicate-post
Published
2019-09-26
Title
Duplicate Post <= 3.2.3 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
duplicate-post
Published
2026-02-11
Title
Duplicate Post < 3.2.4 - Admin+ Stored XSS
Slug
duplicate-post-and-page
Published
2025-03-28
Title
Duplicate Page and Post <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
duplicate-post-and-page
Published
2025-03-28
Title
Duplicate Page and Post <= 1.0 - Authenticated (Contributor+) SQL Injection
Slug
duplicate-post-page-menu-custom-post-type
Published
2023-09-06
Title
Duplicate Post Page Menu & Custom Post Type < 2.4.0 - Subscriber+ Post Duplication
Slug
duplicate-pp
Published
2025-01-06
Title
Duplicate Post, Page and Any Custom Post < 3.5.6 - Authenticated (Contributor+) Post Disclosure via Post Duplication
Slug
duplicate-theme
Published
2023-10-19
Title
Duplicate <= 0.1.6 - CSRF
Slug
duplicate-title-checker
Published
2025-04-09
Title
Duplicate Title Checker <= 1.2 - Authenticated (Subscriber+) SQL Injection
Slug
duplicate-title-validate
Published
2024-10-18
Title
Duplicate Title Validate < 1.4 - Subscriber+ SQL Injection
Slug
duplicate-variations-for-woocommerce
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
duplicate-variations-for-woocommerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
duplicate-wp-page-post
Published
2020-04-25
Title
Duplicate Page and Post < 2.5.7 & WP Post Page Clone < 1.1 - SQL Injections due to Duplicated Snippets
Slug
duplicate-wp-page-post
Published
2022-07-20
Title
Duplicate Page and Post Plugin < 2.8 - Admin+ Stored Cross-Site Scripting
Slug
duplicate-wp-page-post
Published
2025-09-09
Title
Duplicate Page and Post <= 2.9.5 - Authenticated (Contributor+) SQL Injection via meta_key Parameter
Slug
duplicator
Published
2014-08-01
Title
Duplicator - installer.cleanup.php package Parameter XSS
Slug
duplicator
Published
2015-02-19
Title
Duplicator 0.5.8 - Privilege Escalation