PLUGIN SECURITY
Is Duplicate Post safe?
Known vulnerabilities, PHP compatibility and safer alternatives for the Duplicate Post WordPress plugin — checked against WP Clinic's local security database.
Plugin details
- Slug:
duplicate-post - Requires PHP: 7.4+
- Max supported PHP (analyzed): 8.4
Known vulnerabilities
- Yoast Duplicate Post [duplicate-post] < 3.0 [CVE-2014-10378, Yoast Duplicate Post <= 2.6 - Cross-Site Scripting]
- Yoast Duplicate Post [duplicate-post] < 2.6 [CVE-2014-10379, Duplicate Post 2.5 - duplicate-post-admin.php User Login Cookie Value SQL Injection, Yoast Duplicate Post <= 2.5 - SQL Injection]
- Yoast Duplicate Post [duplicate-post] < 2.6 [WordPress Duplicate Post Plugin <= 2.5 - Reflected XSS]
- Yoast Duplicate Post [duplicate-post] < 2.6 [WordPress Duplicate Post Plugin <= 2.5 - SQL Injection]
- Yoast Duplicate Post [duplicate-post] < 3.2.4 [Yoast Duplicate Post <= 3.2.3 - Authenticated (Admin+) Stored Cross-Site Scripting]
+ 6 more known vulnerabilities
- Yoast Duplicate Post [duplicate-post] < 3.2.4 [Duplicate Post <= 3.2.3 - Authenticated Stored Cross-Site Scripting (XSS)]
- Yoast Duplicate Post [duplicate-post] < 2.6 [Duplicate Post 2.5 - options-general.php post Parameter Reflected XSS]
- Yoast Duplicate Post [duplicate-post] < 3.2.4 [CVE-2019-25314, Duplicate Post <= 3.2.3 - Authenticated (Administrator+) Stored Cross-Site Scripting]
- Yoast Duplicate Post [duplicate-post] < 4.6 [CVE-2026-1217, Yoast Duplicate Post <= 4.5 - Authenticated (Contributor+) Missing Authorization to Arbitrary Post Duplication and Overwrite]
- Yoast Duplicate Post [duplicate-post] <= 4.6 (unfixed) [CVE-2026-53740, EUVD-2026-36141]
- Yoast Duplicate Post [duplicate-post] <= 4.6 (unfixed) [CVE-2026-53739, EUVD-2026-36140]
Vulnerabilities are matched against the exact installed version when it's known. Always keep the plugin updated to the latest release.
Safer / more established alternatives
- All-in-One WP Migration and Backup — 5000000+ active installs — max PHP <8.0
- WPvivid — Backup, Migration & Staging — 900000+ active installs — max PHP <8.0
- WP Migrate Lite – Migration Made Easy — 200000+ active installs — max PHP 8.4
- Migrate Guru – Site Migration & Cloning — 200000+ active installs
- Duplicate Menu — 100000+ active installs
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.