The duplicate-post plugin before 2.6 for WordPress has SQL injection.

Published Aug 21, 2019 · Updated Aug 6, 2024 · Assigned by mitre