Vulnerabilities / Duplicator
Duplicator vulnerabilities
Advisories WPSec published for Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More. Other sources may list more. Its attack surface: Duplicator on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-11-04 | WPSEC-2026-2476 | Duplicator <= 5.1.0 - Unauthenticated Installer Password Bypass via Installer AJAX Actions and API Router | High 8.1 | 5.1.1 |
License: CC BY 4.0