Yoast Duplicate Post

WordPress plugin · duplicate-post · WordPress.org ↗

Latest v4.7 Last release Aug 18, 2026 Tested up to WP 7.1.1 3,000,000+ active installs

Critical

High

Known total

Unfixed

Running Yoast Duplicate Post on your site? WP Alerts checks your installed version against every entry below and emails you only when one affects you. Free, no tracking.

Scan a site Monitor my sites →

Severity	Vulnerability	Affected	Fixed in	CVE	Published
CRITICAL CVSS 9.8	Yoast Duplicate Post [duplicate-post] < 2.6 WPVulnerability	< 2.6	v2.6	CVE-2014-10379	Aug 1, 2014
MEDIUM CVSS 6.5	Copy & Delete Posts < 1.5.5 - Authenticated Arbitrary Post Deletion via Missing Object-Level Authorization CVE.org	>=0, <1.5.5	v1.5.5	CVE-2026-19077	Aug 10, 2026
MEDIUM CVSS 5.4	Yoast Duplicate Post [duplicate-post] <= 4.6 (unfixed) WPVulnerability	<= 4.6	unfixed	CVE-2026-53740	Jun 10, 2026
MEDIUM CVSS 4.3	Yoast Duplicate Post [duplicate-post] <= 4.6 (unfixed) WPVulnerability	<= 4.6	unfixed	CVE-2026-53739	Jun 10, 2026
MEDIUM CVSS 4.8	Duplicate-Post 3.2.3 - Persistent Cross-Site Scripting CVE.org	<=3.2.3	unfixed	CVE-2019-25314	Feb 11, 2026
MEDIUM CVSS 5.5	Yoast Duplicate Post [duplicate-post] < 3.2.4 WPVulnerability · PoC available	< 3.2.4	v3.2.4	CVE-2019-25314	Sep 26, 2019
MEDIUM CVSS 6.1	Yoast Duplicate Post [duplicate-post] < 3.0 WPVulnerability	< 3.0	v3.0	CVE-2014-10378	Aug 1, 2014
LOW CVSS 2.7	Copy & Delete Posts < 1.5.6 - Author+ Password-Protected Post Content Disclosure CVE.org	>=0, <1.5.6	v1.5.6	CVE-2026-19085	Aug 21, 2026
LOW CVSS 2.7	Copy & Delete Posts < 1.5.6 - Authenticated Arbitrary Post Content and Password Disclosure CVE.org	>=0, <1.5.6	v1.5.6	CVE-2026-19435	Aug 21, 2026
UNKNOWN	Yoast Duplicate Post [duplicate-post] < 4.6 WPVulnerability	< 4.6	v4.6	CVE-2026-1217	Mar 17, 2026
UNKNOWN	Yoast Duplicate Post [duplicate-post] < 2.6 WPVulnerability	< 2.6	v2.6	—	Aug 1, 2014
UNKNOWN	Yoast Duplicate Post [duplicate-post] < 2.6 WPVulnerability	< 2.6	v2.6	—	Aug 1, 2014
UNKNOWN	Yoast Duplicate Post [duplicate-post] < 3.2.4 WPVulnerability	< 3.2.4	v3.2.4	—	—
UNKNOWN	Yoast Duplicate Post [duplicate-post] < 2.6 WPVulnerability	< 2.6	v2.6	—	—

Data aggregated from WPVulnerability, NVD/NIST, ENISA EUVD, CVE.org and WordPress.org. Provided as-is; verify with the plugin author before acting. Disclaimer.