Login Request a demo
PD
Product
Post Duplicator
by metaphorcreations · last CVE Aug 22, 2026
9
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 0High 1Medium 8Low 0
Severity
All severities9Critical0High1Medium8Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Post Duplicator to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-39474
8.8
0%
Jun 15
WordPress Post Duplicator plugin <= 3.0.10 - PHP Object Injection vulnerability
Affected: through 3.0.10
CVE-2016-15027
6.1
1%
Feb 20
A vulnerability was found in meta4creations Post Duplicator Plugin 2.18 on WordPress
Affected: 2.18
CVE-2021-33852
5.4
1%
Mar 10
A cross-site scripting (XSS) attack can cause arbitrary code (JavaScript) to run in a user's browser and can use an application as the vehicle for the attack
Affected: 2.23
CVE-2026-4244
4.3
0%
Aug 22
Post Duplicator <= 3.0.11 - Missing Authorization to Authenticated (Contributor+) Post Duplication with Arbitrary Author Attribution
Affected: through 3.0.11
CVE-2026-4245
4.3
0%
Aug 22
Post Duplicator <= 3.0.11 - Authorization Bypass to Authenticated (Contributor+) Post Duplication
Affected: through 3.0.11
CVE-2026-2301
4.3
0%
Feb 25
Post Duplicator <= 3.0.8 - Missing Authorization to Authenticated (Contributor+) Protected Post Meta Insertion via 'customMetaData' Parameter
Affected: through 3.0.8
CVE-2025-24736
4.3
0%
Jan 24
WordPress Post Duplicator plugin <= 2.35 - Broken Access Control vulnerability
Affected: through 2.35
CVE-2024-12472
4.3
0%
Jan 11
Post Duplicator <= 2.36 - Authenticated (Contributor+) Protected Post Disclosure
Affected: through 2.36
CVE-2023-49835
4.3
0%
Dec 9
WordPress Post Duplicator plugin <= 2.31 - Broken Access Control vulnerability
Affected: before 2.32
Showing 9