plugin

Wp Clone Any Post Type Vulnerabilities

2 known security issues reported for the Wp Clone Any Post Type WordPress plugin. Most recent disclosed Apr 1, 2025.

2 medium

Running Wp Clone Any Post Type on your site? Check whether your installed version is affected.

Scan your site free

WP Clone any post type <= 3.6 - Open Redirect

medium

The WP Clone any post type plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 3.6. This is due to insufficient validation on a redirect url. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them in...

CVSS:
5.4
Affected:
up to 3.6
Fixed in:
3.7
Disclosed:
Apr 1, 2025

CVE-2025-31871 on NVD →

WP Clone any post type <= 3.6 - Missing Authorization

medium

The WP Clone any post type plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 3.6. This makes it possible for unauthenticated attackers to perform an unauthorized action.

CVSS:
5.3
Affected:
up to 3.6
Fix:
No patched version reported
Disclosed:
Apr 1, 2025

CVE-2025-31872 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database