Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More vulnerabilities

1 known vulnerability in Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More from Smub. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Duplicator – Backups & Migration Plugin –…: Deserialization of Untrusted Data

  CVE-2026-82814Oct 21, 2026Smub

  The Duplicator and Duplicator Pro plugins for WordPress are vulnerable to PHP Object Injection in all versions up to, and including, 1.5.17 and 4.6.10, respectively, via deserialization of untrusted database content in DUPX_UpdateEngine::unserializeTest() duri