Duplicator-pro vulnerabilities
We track 1 vulnerability in Duplicator-pro products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on December 26, 2023.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Duplicator-pro vulnerabilities
- 7.5 High severity
Duplicator: Files or Directories Accessible to External Parties
The Duplicator WordPress plugin before 1.5.7.1, Duplicator Pro WordPress plugin before 4.5.14.2 does not disallow listing the `backups-dup-lite/tmp` directory (or the `backups-dup-pro/tmp` directory in the Pro version), which temporarily stores files containin