cbcvebase.

Revmakx Wp Duplicate Wordpress Migration Plugin vulnerabilities

1 known vulnerability affecting revmakx/wp_duplicate_wordpress_migration_plugin.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH1

Vulnerabilities

Page 1 of 1
CVE-2026-1499P2HIGHCVSS 8.8≤ 1.1.82026-02-06
CVE-2026-1499 [HIGH] CWE-862 CVE-2026-1499: The WP Duplicate plugin for WordPress is vulnerable to Missing Authorization leading to Arbitrary Fi The WP Duplicate plugin for WordPress is vulnerable to Missing Authorization leading to Arbitrary File Upload in all versions up to and including 1.1.8. This is due to a missing capability check on the `process_add_site()` AJAX action combined with path traversal in the file upload functionality. This makes it possible for authenticated (subscriber-leve
nvd
Revmakx Wp Duplicate Wordpress Migration Plugin vulnerabilities | cvebase