Duplicator – WordPress Migration & Backup Plugin vulnerabilities

Latest Duplicator – WordPress Migration & Backup Plugin CVEs

Newest publication first

1. CVE-2023-51681 WordPress Duplicator Plugin <= 1.5.7 is vulnerable to Cross Site Request Forgery (CSRF)

   Published 2024-02-28

   Medium·CVSS 6.5 EPSS 0.25%

   Cross-Site Request Forgery (CSRF) vulnerability in Duplicator Duplicator – WordPress Migration & Backup Plugin.This issue affects Duplicator – WordPress Migration & Backup Plugin: from n/a through 1.5.7.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.