WordPress plugin
atec Duplicate Page & Post security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 1 known vulnerability is fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High0
- Medium1
- Low0
All atec Duplicate Page & Post vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium5.3 | Missing Authorization to Authenticated (Contributor+) Arbitrary Post Duplication and Data Exposure ≤1.2.20Update to 1.2.21 | CVE-2025-13404 |
- Medium5.3Missing Authorization to Authenticated (Contributor+) Arbitrary Post Duplication and Data Exposure
≤1.2.20Update to 1.2.21
atec Duplicate Page & Post: common questions
Does atec Duplicate Page & Post have known vulnerabilities?
Yes. VulnCrest Radar lists 1 known vulnerability in atec Duplicate Page & Post: 1 medium. None are known to affect version null.
How do I check which version of atec Duplicate Page & Post I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent atec Duplicate Page & Post vulnerability?
CVE-2025-13404, published Nov 24, 2025: atec Duplicate Page & Post <= 1.2.20 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Duplication and Data Exposure. Severity: Medium (CVSS 5.3).
Is any atec Duplicate Page & Post vulnerability listed in CISA KEV?
No. None of the known atec Duplicate Page & Post vulnerabilities is currently listed in the CISA KEV catalog.
