Unknown Duplicator vulnerabilities

• unknown duplicator, duplicator-pro +1 more Duplicator < 5.1.0 - Subscriber+ SQLi via Charset and Collation Rewriter During Restore CVE-2026-115262 4.8 MediumNovember 4, 2026
• unknown duplicator, duplicator-pro +1 more Duplicator 5.0.0 - 5.0.6 - Unauthenticated Full Path Disclosure via Installer Entry Points CVE-2026-112244 5.3 MediumNovember 4, 2026
• unknown duplicator, duplicator-pro +1 more Duplicator < 5.1.0 - Reflected XSS via 'logname' Parameter CVE-2026-112243 5.8 MediumNovember 4, 2026
• metaphor creations post duplicator Post Duplicator < 3.0.17 - Contributor+ Draft and Private Post Title Disclosure CVE-2026-111740 2.7 LowNovember 4, 2026
• unknown duplicator Duplicator 1.5.17 - Multisite Subsite Admin+ Network-Wide PHP Code Execution via One-Click Upgrade CVE-2026-115251 7.2 HighOctober 25, 2026
• duplicator pro, unknown duplicator pro, smub duplicator – backups & migration plugin – cloud backups, scheduled backups, & more +2 more Duplicator <= 1.5.17 and Duplicator Pro <= 4.6.10 - Unauthenticated PHP Object Injection CVE-2026-82814 8.8 HighOctober 21, 2026
• unknown sm page duplicator SM Page Duplicator <= 1.0.0 - Editor+ SQL Injection via Page Duplication CVE-2026-16539 8.1 HighAugust 3, 2026
• metaphor creations post duplicator Post Duplicator < 3.0.15 - Contributor+ PHP Object Injection via customMetaData CVE-2026-10749 7.2 HighJune 24, 2026
• awesomemotive duplicator Duplicator < 1.3.0 - Unauthenticated RCE CVE-2018-25095 9.8 CriticalJanuary 8, 2024
• awesomemotive duplicator, unknown duplicator pro +1 more Duplicator < 1.5.7.1; Duplicator Pro < 4.5.14.2 - Unauthenticated Sensitive Data Exposure CVE-2023-6114 EPSS 30.9% 7.5 HighDecember 26, 2023
• awesome motive duplicator pro, awesomemotive duplicator +1 more WordPress Duplicator Pro Plugin <= 4.5.11 is vulnerable to Cross Site Scripting (XSS) CVE-2023-33309 7.1 HighMay 28, 2023
• wp-staging wp staging, unknown wp staging – backup duplicator & migration +1 more WP STAGING < 2.9.18 - Admin+ Stored Cross-Site Scripting CVE-2022-2737 4.8 MediumSeptember 16, 2022
• awesomemotive duplicator Duplicator < 1.4.7.1 - Unauthenticated System Information Disclosure CVE-2022-2552 Public exploit EPSS 12.0% 5.3 MediumAugust 22, 2022
• awesomemotive duplicator, unknown duplicator – wordpress migration plugin +1 more Duplicator < 1.4.7 - Unauthenticated Backup Download CVE-2022-2551 Public exploit EPSS 17.7% 7.5 HighAugust 22, 2022