Really Simple Security logo

Log out
Get PRO

Latest

Access violation vulnerability in Duplicator Pro 4.5.14.2

  • Severity: critical
  • Status: Fixed
  • Publication: December 4, 2023

Duplicator and Duplicator Pro are WordPress plugins that help website owners with website migration and backups. However, in various versions of these plugins, it is possible for unauthenticated attackers to access sensitive information and files, which could lead to a complete website takeover. It is important to update the plugins to the latest version to make sure they are secure.

Detected in:

Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More fixed vulnerable versions:
Duplicator – Migration & Backup Plugin fixed vulnerable versions:
Duplicator – WordPress Migration & Backup Plugin fixed vulnerable versions: >= * <= 1.5.7
Duplicator Pro fixed vulnerable versions: >= * < 4.5.14.2

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.