High severity8.8NVD Advisory· Published Sep 13, 2019· Updated Jun 17, 2026No known patch

CVE-2016-10944

No known patch is available for this vulnerability.

The affected plugin has not been updated on WordPress.org since before this CVE was disclosed; the latest installable version is still vulnerable. If you have the affected software installed, you should uninstall or replace it rather than wait for an update.

CVE-2016-10944

Description

The multisite-post-duplicator plugin before 1.1.3 for WordPress has wp-admin/tools.php?page=mpd CSRF.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/multisite-post-duplicator plugindescription
WordPress/multisite-post-duplicatorllm-fuzzy
Range: <1.1.3

Patches

Vulnerability mechanics

References

advisories.dxw.com/advisories/csrf-vulnerability-in-multisite-post-duplicator-could-allow-an-attacker-to-do-almost-anything-an-admin-user-can-do/nvdExploitThird Party Advisory
wordpress.org/plugins/multisite-post-duplicator/nvdRelease Notes

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000