1 result · Clear filters · Feed
-
High 8.8
Quick Post Duplicator <= 2.0 - Authenticated (Contributor+) SQL Injection via post_id
The Quick Post Duplicator for WordPress is vulnerable to SQL Injection via the ‘post_id’ parameter in versions up to, and including, 2.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. …