Live Copy Paste for Elementor – Cross Domain Copy Paste & Page Duplicator Security & Risk Analysis

wordpress.org/plugins/live-copy-paste

The ultimate Elementor addon for cross-domain copying, magic copy buttons, and instant page duplication. Build websites faster with one-click design t …

7K active installs v1.5.4 PHP 7.4.0+ WP 6.0+ Updated Jun 30, 2026
cross-domainelementor-addonelementor-copy-pastepage-duplicatorwebsite-builder
78
B · Generally Safe
CVEs total1
Unpatched1
Last CVEJun 26, 2026
Safety Verdict

Is Live Copy Paste for Elementor – Cross Domain Copy Paste & Page Duplicator Safe to Use in 2026?

Mostly Safe

Score 78/100

Live Copy Paste for Elementor – Cross Domain Copy Paste & Page Duplicator is generally safe to use. 1 past CVE were resolved.

1 known CVE 1 unpatched Last CVE: Jun 26, 2026Updated 1mo ago
Risk Assessment

The "live-copy-paste" v1.5.1 plugin exhibits a generally good security posture, with several strong security practices in place. The static analysis reveals a clean codebase with no identified dangerous functions, file operations, or critical/high severity taint flows. All entry points, including AJAX handlers, appear to have authorization checks. Output escaping is exceptionally high at 98%, and the plugin utilizes nonce checks and capability checks extensively. The absence of any recorded vulnerabilities or CVEs in its history further reinforces this positive assessment, suggesting a well-maintained and secure plugin.

Key Concerns

  • SQL queries with potential for injection
  • External HTTP request without context
Vulnerabilities
1 published

Live Copy Paste for Elementor – Cross Domain Copy Paste & Page Duplicator Security Vulnerabilities

CVEs by Year

1 CVE in 2026 · unpatched
2026
Patched Has unpatched

Severity Breakdown

Medium
1

1 total CVE

CVE-2025-63079medium · 4.3Missing Authorization

Live Copy Paste for Elementor – Cross Domain Copy Paste & Page Duplicator <= 1.5.3 - Missing Authorization

Jun 26, 2026Unpatched
Version History

Live Copy Paste for Elementor – Cross Domain Copy Paste & Page Duplicator Release Timeline

v1.5.4Current1 CVE
v1.5.31 CVE
v1.5.21 CVE
v1.5.11 CVE
v1.5.01 CVE
v1.4.151 CVE
v1.4.141 CVE
v1.4.131 CVE
v1.4.121 CVE
v1.4.111 CVE
v1.4.101 CVE
v1.4.91 CVE
v1.4.81 CVE
v1.4.71 CVE
v1.4.61 CVE
v1.4.51 CVE
v1.4.21 CVE
v1.4.01 CVE
v1.3.31 CVE
v1.3.21 CVE
Code Analysis
Analyzed Mar 16, 2026

Live Copy Paste for Elementor – Cross Domain Copy Paste & Page Duplicator Code Analysis

Dangerous Functions
0
Raw SQL Queries
1
1 prepared
Unescaped Output
1
40 escaped
Nonce Checks
4
Capability Checks
7
File Operations
0
External Requests
1
Bundled Libraries
0

SQL Query Safety

50% prepared2 total queries

Output Escaping

98% escaped41 total outputs
Data Flows · Security
All sanitized

Data Flow Analysis

2 flows
bdt_duplicate_as_draft (includes\duplicator\class-duplicator.php:19)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Live Copy Paste for Elementor – Cross Domain Copy Paste & Page Duplicator Attack Surface

Entry Points4
Unprotected0

AJAX Handlers 4

authwp_ajax_bdt_elementor_import_live_copy_assets_filesclasses\class-live-copy-paste-btn.php:11
noprivwp_ajax_live_copy_paste_magic_data_server_requestclasses\class-live-copy-paste-magic-btn.php:10
authwp_ajax_live_copy_paste_magic_data_server_requestclasses\class-live-copy-paste-magic-btn.php:11
authwp_ajax_bdt_admin_api_biggopti_dismissincludes\promotion\biggopti\index.php:24
WordPress Hooks 20
actionelementor/editor/after_enqueue_scriptsclasses\class-live-copy-paste-btn.php:12
actionwp_enqueue_scriptsclasses\class-live-copy-paste-btn.php:13
actionplugins_loadedclasses\class-live-copy-paste-loader.php:17
actionelementor/initclasses\class-live-copy-paste-loader.php:18
actionadmin_initclasses\class-live-copy-paste-loader.php:19
actionadmin_noticesclasses\class-live-copy-paste-loader.php:73
actionadmin_noticesclasses\class-live-copy-paste-loader.php:81
actionadmin_noticesclasses\class-live-copy-paste-loader.php:87
actionelementor/kit/register_tabsclasses\class-live-copy-paste-loader.php:223
actionelementor/element/section/section_advanced/after_section_endclasses\class-live-copy-paste-loader.php:229
actionelementor/element/container/section_layout/after_section_endclasses\class-live-copy-paste-loader.php:230
actionwp_enqueue_scriptsclasses\class-live-copy-paste-magic-btn-v2.php:11
actionwp_enqueue_scriptsclasses\class-live-copy-paste-magic-btn.php:9
actionadmin_action_bdt_duplicate_as_draftincludes\duplicator\class-duplicator.php:14
filterpost_row_actionsincludes\duplicator\class-duplicator.php:15
filterpage_row_actionsincludes\duplicator\class-duplicator.php:16
actionadmin_enqueue_scriptsincludes\promotion\biggopti\index.php:25
actionwp_dashboard_setupincludes\promotion\feeds\index.php:25
actionadmin_enqueue_scriptsincludes\promotion\feeds\index.php:26
actioninitincludes\settings\options.php:8
Maintenance & Trust

Live Copy Paste for Elementor – Cross Domain Copy Paste & Page Duplicator Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.5
Last updatedJun 30, 2026
PHP min version7.4.0
Downloads98K

Community Trust

Rating86/100
Number of ratings3
Active installs7K
Developer Profile

Live Copy Paste for Elementor – Cross Domain Copy Paste & Page Duplicator Developer Profile

bdthemes

24 plugins · 250K total installs

92
trust score
Avg Security Score
97/100
Avg Patch Time
21 days
View full developer profile
Detection Fingerprints

How We Detect Live Copy Paste for Elementor – Cross Domain Copy Paste & Page Duplicator

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/live-copy-paste/assets/js/xdLocalStorage.js/wp-content/plugins/live-copy-paste/assets/js/live-copy-paste.js/wp-content/plugins/live-copy-paste/assets/css/live-copy-paste-public.css/wp-content/plugins/live-copy-paste/assets/js/live-copy-paste-public-v2.js/wp-content/plugins/live-copy-paste/assets/js/live-copy-paste-public.js
Script Paths
live-copy-storage-jslive-copy-scripts-jslive-copy-paste-csslive-copy-paste-scripts-jslive-copy-paste-storage-jslive-copy-paste-scripts-js
Version Parameters
live-copy-paste/assets/js/xdLocalStorage.js?ver=live-copy-paste/assets/js/live-copy-paste.js?ver=live-copy-paste/assets/css/live-copy-paste-public.css?ver=live-copy-paste/assets/js/live-copy-paste-public-v2.js?ver=live-copy-paste/assets/js/live-copy-paste-public.js?ver=

HTML / DOM Fingerprints

CSS Classes
live-copy-paste-btn-wrap
Data Attributes
data-iddata-element_typedata-settings
JS Globals
bdt_live_copybdthemes_magic_copy_ajaxlive_copy_settings_control
REST Endpoints
/wp-json/live-copy-paste
FAQ

Frequently Asked Questions about Live Copy Paste for Elementor – Cross Domain Copy Paste & Page Duplicator