← WordPress Vulnerabilities
WordPress security by component

Doubly – Cross Domain Copy Paste for

Doubly – Cross Domain Copy Paste for is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Dec 13, 2025; the highest CVE/CNA score is 8.8.

Plugin slug: doubly

CVE-2025-14476: Doubly – Cross Domain Copy Paste for: Code execution

Doubly – Cross Domain Copy Paste for is affected by code execution. Exploitation requires at least subscriber-level access. Successful exploitation can run attacker-controlled code in the WordPress hosting account.

PublishedDec 13, 2025
Safe version guidanceSee mitigation notes
Safe version
Dec 13, 2025 CVE-2025-14476
Doubly – Cross Domain Copy Paste for: Code execution
Doubly – Cross Domain Copy Paste for is affected by code execution. Exploitation requires at least subscriber-level access. Successful exploitation can run attacker-controlled code in the WordPress hosting account.
See mitigation notes
CVE8.8
NVDPending