WordPress Plugin Vulnerabilities

Duplicate Post 2.5 - options-general.php post Parameter Reflected XSS

Description

The Yoast Duplicate Post WordPress plugin was affected by an options-general.php post Parameter Reflected XSS security vulnerability.

Affects Plugins

Plugin icon
duplicate-post
Fixed in 2.6

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
4ed4d9c7-d743-4d9d-bc66-fe0122178036

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2015-05-15 (about 10 years ago)

Other

Published
Title
Published
2022-03-07
Title
Drag and Drop Multiple File Upload - Contact Form 7 < 1.3.6.3 - Unauthenticated Stored XSS
Published
2025-03-11
Title
binlayerpress <= 1.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Published
2022-11-30
Title
Custom Product Tabs for WooCommerce < 1.8.0 - Admin+ Stored XSS
Published
2019-01-07
Title
JSmol2WP <= 1.07 - Unauthenticated Cross-Site Scripting (XSS)
Published
2025-01-16
Title
Content Planner <= 1.0 - Reflected Cross-Site Scripting