What’s Vulnerable › Products

metaphorcreations Post Duplicator vulnerabilities

9 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Check whether your metaphorcreations Post Duplicator version is affected

Latest metaphorcreations Post Duplicator vulnerabilities

• CVE-2026-4244 — Post Duplicator <= 3.0.11 - Missing Authorization to Authenticated (Contributor+) Post Duplication with Arbitrary Author Attribution (CVSS 4.3)
• CVE-2026-4245 — Post Duplicator <= 3.0.11 - Authorization Bypass to Authenticated (Contributor+) Post Duplication (CVSS 4.3)
• CVE-2026-39474 — WordPress Post Duplicator plugin <= 3.0.10 - PHP Object Injection vulnerability (CVSS 8.8)
• CVE-2026-2301 — Post Duplicator <= 3.0.8 - Missing Authorization to Authenticated (Contributor+) Protected Post Meta Insertion via 'customMetaData' Parameter (CVSS 4.3)
• CVE-2025-24736 — WordPress Post Duplicator plugin <= 2.35 - Broken Access Control vulnerability (CVSS 4.3)
• CVE-2024-12472 — Post Duplicator <= 2.36 - Authenticated (Contributor+) Protected Post Disclosure (CVSS 4.3)
• CVE-2023-49835 — WordPress Post Duplicator plugin <= 2.31 - Broken Access Control vulnerability (CVSS 4.3)
• CVE-2016-15027 — meta4creations Post Duplicator Plugin notices.php mtphr_post_duplicator_notice cross site scripting (CVSS 6.1)
• CVE-2021-33852 — (CVSS 5.4)