SQL Injection Vulnerability in Duplicate Page and Post Plugin for WordPress

CVE-2025-6189

What is CVE-2025-6189?

The Duplicate Page and Post plugin for WordPress is susceptible to a time-based SQL injection vulnerability. This issue arises from inadequate escaping of the user-supplied 'meta_key' parameter combined with insufficient preparation in the SQL queries. Attackers with Contributor-level access or higher can exploit this vulnerability to append malicious SQL queries, potentially extracting sensitive database information.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References