Post Duplicator

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 57% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Modeled within the band wp.org reports; tightens as we track daily.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. The recent download trend is too spiky to read.

1. ★★★★★ m4n0jkum4r

   2mo ago

   Made my work easier and felt like this plugin should have been a native feature 🙂

   Read on wp.org ↗
2. ★★★★★ lanckwi

   6mo ago

   Problem was solved the same day.Thanks

   Read on wp.org ↗
3. ★★★★★ dburkeux

   8mo ago

   Does what the name promises: allows you to quickly duplicate pages and posts, good for experimenting with big changes. Dev is quick to respond and fix bugs.

   Read on wp.org ↗
4. ★★★★★ hurtadodoo

   1.4y ago

   Saved me tons of time when creating similar pages. Everything works perfectly and the UI is clean. Highly recommended!

   Read on wp.org ↗
5. ★★★★★ soydigital

   1.5y ago

   This plugin works fine for me. This topic was modified 1 year, 4 months ago by soydigital.

   Read on wp.org ↗
6. ★★★★★ bleyjo

   1.5y ago

   simple and to the point, does what it says on the tin

   Read on wp.org ↗
7. ★★★★★ Nick Sinclair

   1.5y ago

   I use it across many websites. It’s simple, lightweight, and easy for people to use!👍 I had an issue with the plugin, but the author fixed it within minutes! Bravo. This topic was modified 1 year, 5 months ago by Nick Sinclair. Reason: Forgot to mention responsiveness of author

   Read on wp.org ↗
8. ★★★★★ aridio

   2.0y ago

   It’s a quite good plugin, it works very fine 👍

   Read on wp.org ↗

Recent releases and news for this plugin

1. 2026-08-22 Version 3.0.16 Stop loading every taxonomy term when opening the duplication modal; search terms as needed instead 3.0.16
2. 2026-05-14 Version 3.0.15 Security fix: store duplicated custom meta via add_post_meta() so WordPress core’s maybe_serialize() neutralizes raw serialized payloads, mitigating PHP Object Injection (CWE-502) 3.0.15
3. 2026-04-02 Version 3.0.14 Added “Excluded Meta Keys” setting on the Advanced tab to allow users to specify meta keys that should never be duplicated or shown in the duplication modal Moved nestedpages and wpca-list screen slugs from settings defa 3.0.14
4. 2026-03-21 Version 3.0.13 Added PHP fallback for duplicate row-action link so duplication works on any admin screen even when scripts are not loaded Added mtphr_post_duplicator_additional_screens filter and settings field for configuring extra ad 3.0.13
5. 2026-03-18 Version 3.0.12 Security fix: restrict future and private statuses for users without publish_posts capability Security fix: enforce post type duplication restrictions in the REST API permission callback Security fix: prevent contributor 3.0.12
6. 2026-03-06 Version 3.0.11 Security hardening for serialized custom meta handling in REST responses Build dependencies: pin immutable to patched version to address prototype pollution advisory Build dependencies: pin @babel/runtime to patched vers 3.0.11

10 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 4.3 Post Duplicator <= 3.0.11 - Missing Authorization to Authenticated (Contributor+) Post Duplication with Arbitrary Author Attribution ↗
   2026-08-21 CVE-2026-4244 Missing Authorization Affects <= 3.0.11 Patched in 3.0.12
2. Medium · 4.3 Post Duplicator <= 3.0.11 - Authorization Bypass to Authenticated (Contributor+) Post Duplication ↗
   2026-08-21 CVE-2026-4245 Incorrect Authorization Affects <= 3.0.11 Patched in 3.0.12
3. High · 7.5 Post Duplicator < 3.0.15 - Authenticated (Contributor+) PHP Object Injection ↗
   2026-06-25 CVE-2026-10749 Deserialization of Untrusted Data Affects < 3.0.15 Patched in 3.0.15
4. High · 7.5 Post Duplicator <= 3.0.10 - Authenticated (Contributor+) PHP Object Injection ↗
   2026-04-13 CVE-2026-39474 Deserialization of Untrusted Data Affects <= 3.0.10 Patched in 3.0.11
5. Medium · 4.3 Post Duplicator <= 3.0.8 - Missing Authorization to Authenticated (Contributor+) Protected Post Meta Insertion via 'customMetaData' Parameter ↗
   2026-02-24 CVE-2026-2301 Missing Authorization Affects <= 3.0.8 Patched in 3.0.9
6. Medium · 4.3 Post Duplicator <= 2.35 - Missing Authorization ↗
   2025-01-24 CVE-2025-24736 Missing Authorization Affects <= 2.35 Patched in 2.36
7. Medium · 4.3 Post Duplicator <= 2.36 - Authenticated (Contributor+) Protected Post Disclosure ↗
   2025-01-10 CVE-2024-12472 Authorization Bypass Through User-Controlled Key Affects <= 2.36 Patched in 2.37
8. Medium · 4.3 Post Duplicator <= 2.31 - Missing Authorization via mtphr_duplicate_post ↗
   2023-12-05 CVE-2023-49835 Missing Authorization Affects <= 2.31 Patched in 2.32
9. Medium · 6.4 Post Duplicator <= 2.23 - Cross-Site Scripting ↗
   2021-12-02 CVE-2021-33852 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 2.24 Patched in 2.24
10. Medium · 6.1 Post Duplicator <= 2.16 - Reflected Cross-Site Scripting ↗
    2016-04-06 CVE-2016-15027 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.16 Patched in 2.17

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Translated into 90 languages, 3 at 90% or more

Plus 66 more locales with partial translations.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

No tier crossings observed yet.

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Post Cloner 1K+ installs · 4.3★ · 3 shared tags D
• W WP Admin UI Customize 30K+ installs · 4.4★ · 2 shared tags C
• P Public Post Preview Configurator 10K+ installs · 4.1★ · 2 shared tags D
• SEO Auto Linker 3K+ installs · 4.1★ · 2 shared tags C
• H HiFi (Head Injection, Foot Injection) 2K+ installs · 4.2★ · 2 shared tags D
• W WP Image Borders 2K+ installs · 4.2★ · 2 shared tags D

Embed this report card

Drop a live Pulse card for Post Duplicator into a readme, a review or a deck. It updates itself.

Post Duplicator: 200K+ active installs, 4.8★ (80 reviews). Plugin Pulse (WP Mayor), as of 2026-08-25. https://plugins.wpmayor.com/plugin/post-duplicator