CVE-2019-25314: Yoast Duplicate-Post

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

Yoast Duplicate-Post WordPress Plugin 3.2.3 contains a persistent cross-site scripting vulnerability in plugin settings parameters. Attackers can inject malicious scripts into title prefix, suffix, menu order, and blacklist fields to execute arbitrary JavaScript in admin interfaces.

Affected products

• Yoast Duplicate-Post: from 0.3, up to and including 3.2.3

Published 2026-02-11. Last modified 2026-06-17.