Description
WordPress Plugin Duplicate Page and Post is injecting spam into the website's content, thus publicizing content to normal site visitors or to search engines without the authorization of the website's owner. WordPress Plugin Duplicate Page and Post version 2.1.1 is vulnerable; prior versions may also be affected.
Remediation
Disable the plugin until a fix is available
References
Related Vulnerabilities
WordPress Plugin WordPress Download Manager Cross-Site Scripting (3.2.21)
WordPress Plugin Users Ultra Membership Multiple Vulnerabilities (1.5.62)
XWiki Missing Authentication for Critical Function Vulnerability (CVE-2022-24820)
WordPress Plugin SoundCloud Is Gold 'width' Parameter Cross-Site Scripting (2.1)