Metaphorcreations

Post Duplicator

7 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2026-39474

  • EPSS 0.43%
  • Veröffentlicht 15.06.2026 20:17:49
  • Zuletzt bearbeitet 15.06.2026 21:24:32

Contributor PHP Object Injection in Post Duplicator <= 3.0.10 versions.

4.3

CVE-2026-2301

  • EPSS 0.21%
  • Veröffentlicht 25.02.2026 09:26:51
  • Zuletzt bearbeitet 15.04.2026 00:35:42

The Post Duplicator plugin for WordPress is vulnerable to unauthorized arbitrary protected post meta insertion in all versions up to, and including, 3.0.8. This is due to the `duplicate_post()` function in `includes/api.php` using `$wpdb->insert()` d...

4.3

CVE-2025-24736

  • EPSS 0.32%
  • Veröffentlicht 24.01.2025 18:15:47
  • Zuletzt bearbeitet 23.04.2026 15:25:24

Missing Authorization vulnerability in metaphorcreations Post Duplicator post-duplicator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Duplicator: from n/a through <= 2.35.

4.3

CVE-2024-12472

  • EPSS 0.3%
  • Veröffentlicht 11.01.2025 03:15:21
  • Zuletzt bearbeitet 08.04.2026 17:17:53

The Post Duplicator plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.36 via the mtphr_duplicate_post() function due to insufficient restrictions on which posts can be duplicated. This makes it possibl...

4.3

CVE-2023-49835

  • EPSS 0.4%
  • Veröffentlicht 09.12.2024 13:15:36
  • Zuletzt bearbeitet 28.04.2026 19:22:28

Missing Authorization vulnerability in Metaphor Creations Post Duplicator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Duplicator: from n/a through 2.31.

6.1

CVE-2016-15027

  • EPSS 0.63%
  • Veröffentlicht 20.02.2023 17:15:11
  • Zuletzt bearbeitet 21.11.2024 02:45:31

A vulnerability was found in meta4creations Post Duplicator Plugin 2.18 on WordPress. It has been classified as problematic. Affected is the function mtphr_post_duplicator_notice of the file includes/notices.php. The manipulation of the argument post...

5.4

CVE-2021-33852

Exploit
  • EPSS 0.63%
  • Veröffentlicht 10.03.2022 17:42:36
  • Zuletzt bearbeitet 21.11.2024 06:09:41

A cross-site scripting (XSS) attack can cause arbitrary code (JavaScript) to run in a user's browser and can use an application as the vehicle for the attack. The XSS payload given in the "Duplicate Title" text box executes whenever the user opens th...