WordPress Duplicator Pro Vulnerabilities

Wordpress Duplicator Pro vulnerabilities.

JSON RSS CSV 🔔 Create Alert Trigger

4 November 2026

SQL Injection Vulnerability in Duplicator Plugin for WordPress
CVE-2026-115262
WordPressDuplicator👾🟡4.8MEDIUM
Unauthorized Access Vulnerability in Duplicator Plugin by WordPress
CVE-2026-112244
WordPressDuplicator👾🟡5.3MEDIUM
Reflected Cross-Site Scripting Vulnerability in Duplicator Plugin by Snap Creek
CVE-2026-112243
WordPressDuplicator👾🟡5.8MEDIUM

21 October 2026

PHP Object Injection Vulnerability in Duplicator and Duplicator Pro Plugins
CVE-2026-82814
WordPressDuplicator – Backups &...8.8HIGH

16 October 2024

Freemius SDK Vulnerabilities Affect Hundreds of WordPress Plugins and Themes
CVE-2022-4974
WordPressYasr – Yet Another Sta...6.3MEDIUM

26 December 2023

Duplicator < 1.5.7.1; Duplicator Pro < 4.5.14.2 - Unauthenticated Sensitive Data Exposure
CVE-2023-6114
WordpressDuplicatorEPSS 30%7.5HIGH

28 May 2023

WordPress Duplicator Pro Plugin <= 4.5.11 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-33309
WordPressDuplicator Pro7.1HIGH