A vulnerability was found in Falcon Solutions Duplicate Page and Post Plugin up to 2.9.5 on WordPress. It has been classified as critical. The affected element is an unknown function. This manipulation of the argument meta_key causes sql injection.

This vulnerability is handled as CVE-2025-6189. The attack can be initiated remotely. There is not any exploit available.