Vendor

Duplicator

2 known vulnerabilities.

Products

Duplicator – WordPress Migration & Backup Plugin 1 Duplicator Pro 1

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High 8.8

CVE-2026-82814

Duplicator <= 1.5.17 and Duplicator Pro <= 4.6.10 - Unauthenticated PHP Object Injection

The Duplicator and Duplicator Pro plugins for WordPress are vulnerable to PHP Object Injection in all versions up to, and including, 1.5.17 and 4.6.10, respectively, via deserialization of untrusted database content in DUPX_UpdateEngine::unserializeTest() dur…

smub Duplicator Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More Duplicator Pro

Oct 21, 2026