Ninjateam Fastdup Fastest Wordpress Migration Duplicator vulnerabilities
2 known vulnerabilities affecting ninjateam/fastdup_fastest_wordpress_migration_duplicator.
Total CVEs
2
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH1MEDIUM1
Vulnerabilities
Page 1 of 1
CVE-2026-1104P2HIGHCVSS 8.8≤ 2.7.12026-02-12
CVE-2026-1104 [HIGH] CWE-862 CVE-2026-1104: The FastDup – Fastest WordPress Migration & Duplicator plugin for WordPress is vulnerable to unautho
The FastDup – Fastest WordPress Migration & Duplicator plugin for WordPress is vulnerable to unauthorized backup creation and download due to a missing capability check on REST API endpoints in all versions up to, and including, 2.7.1. This makes it possible for authenticated attackers, with Contributor-level access and above, to create and download ful
nvd
CVE-2026-0604P3MEDIUMCVSS 6.5≤ 2.72026-01-06
CVE-2026-0604 [MEDIUM] CWE-22 CVE-2026-0604: The FastDup – Fastest WordPress Migration & Duplicator plugin for WordPress is vulnerable to Path Tr
The FastDup – Fastest WordPress Migration & Duplicator plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 2.7 via the 'dir_path' parameter in the 'njt-fastdup/v1/template/directory-tree' REST API endpoint. This makes it possible for authenticated attackers, with Contributor-level access and above, to read the con
nvd