A vulnerability labeled as critical has been found in Page and Post Clone Plugin up to 6.3 on WordPress. Affected by this vulnerability is the function content_clone. The manipulation of the argument meta_key results in sql injection.

This vulnerability is identified as CVE-2026-2893. The attack can be executed remotely. There is not any exploit available.