All products

post-duplicator

WordPress · Plugin
13 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Post Duplicator < 3.0.18 - Authenticated (Administrator+) Privilege EscalationCVE-2026-121875 post-duplicator WordPress Medium Fix reported
Post Duplicator <= 3.0.17 - Missing AuthorizationCVE-2026-121874 post-duplicator WordPress Low Fix reported
Post Duplicator < 3.0.17 - Missing AuthorizationCVE-2026-111740 post-duplicator WordPress Medium Fix reported
Post Duplicator <= 3.0.11 - Missing Authorization to Authenticated (Contributor+) Post Duplication with Arbitrary Author AttributionCVE-2026-4244 post-duplicator WordPress Medium Fix reported
Post Duplicator <= 3.0.11 - Authorization Bypass to Authenticated (Contributor+) Post DuplicationCVE-2026-4245 post-duplicator WordPress Medium Fix reported
Post Duplicator < 3.0.15 - Authenticated (Contributor+) PHP Object InjectionCVE-2026-10749 post-duplicator WordPress High Fix reported
Post Duplicator <= 3.0.10 - Authenticated (Contributor+) PHP Object InjectionCVE-2026-39474 post-duplicator WordPress High Fix reported
Post Duplicator <= 3.0.8 - Missing Authorization to Authenticated (Contributor+) Protected Post Meta Insertion via 'customMetaData' ParameterCVE-2026-2301 post-duplicator WordPress Medium Fix reported
Post Duplicator <= 2.35 - Missing AuthorizationCVE-2025-24736 post-duplicator WordPress Medium Fix reported
Post Duplicator <= 2.36 - Authenticated (Contributor+) Protected Post DisclosureCVE-2024-12472 post-duplicator WordPress Medium Fix reported
Post Duplicator <= 2.16 - Reflected Cross-Site ScriptingCVE-2016-15027 post-duplicator WordPress Medium Fix reported
Post Duplicator <= 2.31 - Missing Authorization via mtphr_duplicate_postCVE-2023-49835 post-duplicator WordPress Medium Fix reported
Post Duplicator <= 2.23 - Cross-Site ScriptingCVE-2021-33852 post-duplicator WordPress Medium Fix reported