plugin
5 known security issues reported for the Duplicate Wp Page Post WordPress plugin. Most recent disclosed May 27, 2026.
Running Duplicate Wp Page Post on your site? Check whether your installed version is affected.
Scan your site freeThe Duplicate Page and Post plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 2.9.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with contributor-level acc...
The Duplicate Page and Post plugin for WordPress is vulnerable to time-based SQL Injection via the ‘meta_key’ parameter in all versions up to, and including, 2.9.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authen...
The Duplicate Page and Post plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘Settings->Duplicate Post->Duplicate Post Suffix’ value in versions up to, and including, 2.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with administ...
The Duplicate Page and Post plugin for WordPress is vulnerable to stored Cross-Site Scripting in versions up to, and including, 2.7 on the dpp_page_settings page. This allows authenticated users with administrative permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an inject...
The Duplicate Page and Post, WP Post Page Clone and Duplicate Page plugins for WordPress are vulnerable to SQL Injection via the ‘post’ parameter in versions up to, and including, 2.5.6, 1.1, and 3.3 respectively, due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the exis...
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free