WordPress Plugin Vulnerabilities

Post Duplicator <= 2.16 - Cross-Site Scripting (XSS)

Description

The Post Duplicator WordPress plugin was affected by a Cross-Site Scripting (XSS) security vulnerability.

Affects Plugins

Plugin icon
post-duplicator
Fixed in 2.17

References

URL
https://github.com/meta4creations/post-duplicator/commit/ca67c05e490c0cf93a1e9b2d93bfeff3dd96f594

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
0eae7a57-6691-4671-b309-74adb4f9292a

Timeline

Publicly Published
2016-04-06 (about 10 years ago)
Added
2016-07-14 (about 9 years ago)
Last Updated
2019-11-01 (about 6 years ago)

Other

Published
Title
Published
2024-03-25
Title
Photo Gallery by Ays < 5.5.3 - Reflected Cross-Site Scripting
Published
2024-12-13
Title
My IDX Home Search < 2.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2024-04-04
Title
Custom post types, Custom Fields & more < 5.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2024-05-20
Title
HT Mega < 2.5.3 - Contributor+ Stored XSS
Published
2025-02-22
Title
EZ SQL Reports Shortcode Widget and DB Backup < 5.25.08 - Authenticated (Contributor+) Stored Cross-Site Scripting