Duplicate Page, 7b71ccf24044ee8cc2cb48e21b580dfda394bc1f

CVE, Research URL: 7b71ccf24044ee8cc2cb48e21b580dfda394bc1f
Home page URL: Security reports for Duplicate Page
Application: Duplicate Page
Published on: Apr 25, 2020
Research Description: Duplicate Page [duplicate-page] < 3.4 Duplicate Page Plugins <= (Various Versions) - SQL Injection The Duplicate Page and Post, WP Post Page Clone and Duplicate Page plugins for WordPress are vulnerable to SQL Injection via the ‘post’ parameter in versions up to, and including, 2.5.6, 1.1, and 3.3 respectively, due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
Affected versions: max 3.4.
Status: vulnerable