Input validation vulnerability in Post Duplicator 2.16

The Post Duplicator plugin for WordPress is not secure in versions 2.16 and below. Attackers can insert malicious code into the plugin through the ‘post-duplicated’ parameter. This code can then be run in the browser of anyone who visits the website, potentially damaging their computer or allowing attackers to steal data. To prevent this, users should upgrade to a version of the plugin that is not vulnerable to this type of attack.