CVE-2021-43408

CVE-2021-43408 is a high-severity SQL Injection vulnerability affecting the "Duplicate Post" WordPress plugin up to and including version 1.1.9. This flaw allows authenticated users with access to the plugin (by default, Administrators, but configurable for other roles) to inject malicious SQL queries. Successful exploitation can lead to reading, modifying, or deleting database content, and potentially executing system commands or accessing the local file system. With a CVSS score of 8.8 (High), the attack vector is network-based with low attack complexity and no user interaction required. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.