N/A
2026-03-17< 4.6
Yoast Duplicate Post <= 4.5 - Authenticated (Contributor+) Missing Authorization to Arbitrary Post Duplication and Overwrite
Minimum safe version
4.6
Update to 4.6 or later to address 9 fixable vulnerabilities
Yoast Duplicate Post <= 4.5 - Authenticated (Contributor+) Missing Authorization to Arbitrary Post Duplication and Overwrite
CVE-2019-25314
Duplicate Post 2.5 - options-general.php post Parameter Reflected XSS
Duplicate Post <= 3.2.3 - Authenticated Stored Cross-Site Scripting (XSS)
Yoast Duplicate Post <= 3.2.3 - Authenticated (Admin+) Stored Cross-Site Scripting
WordPress Duplicate Post Plugin <= 2.5 - SQL Injection
WordPress Duplicate Post Plugin <= 2.5 - Reflected XSS
CVE-2014-10379
CVE-2014-10378