WP Plugin Duplicator

A WordPress plugin is a piece of software that plugs into your WordPress site. Plugins can add new functionality or extend existing functionality on your site allowing you to create virtually any kind of website from ecommerce stores to portfolios to directory sites.

Official Site:

https://wordpress.org/plugins/duplicator

Severity Summary:

Critical: 2 High: 2 Medium: 6 Information: 1

Reference

Title

Severity

No CVE number

WordPress Plugin Duplicator-WordPress Migration SQL Injection

Critical

No CVE number

WordPress Plugin Duplicator-WordPress Migration Remote Code Execution

Critical

No CVE number

WordPress Plugin Duplicator-WordPress Migration Cross-Site Request Forgery

High

CVE-2020-11738

WordPress Plugin Duplicator-WordPress Migration Arbitrary File Download

High

No CVE number

WordPress Plugin Duplicator-WordPress Migration Arbitrary File Disclosure

Medium

CVE-2013-4625

WordPress Plugin Duplicator-WordPress Migration Cross-Site Scripting

Medium

CVE-2014-9262

WordPress Plugin Duplicator-WordPress Migration Security Bypass

Medium

No CVE number

WordPress Plugin Duplicator-WordPress Migration Cross-Site Scripting

Medium

CVE-2017-16815

WordPress Plugin Duplicator-WordPress Migration Cross-Site Scripting

Medium

CVE-2018-7543

WordPress Plugin Duplicator-WordPress Migration Cross-Site Scripting

Medium

No CVE number

WordPress Plugin Duplicator-WordPress Migration Unspecified Vulnerability

Information