Medium
CVE-2025-24736
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 63
Reset filters
Medium
CVE-2025-24651
WebToffee WP Backup and Migration <= 1.5.3 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2024-12472
Post Duplicator <= 2.36 - Authenticated (Contributor+) Protected Post Disclosure
Medium
CVE-2024-6210
Duplicator <= 1.5.9 - Full Path Disclosure
Medium
CVE-2024-5942
Page and Post Clone <= 6.0 - Insecure Direct Object Reference to Authenticated (Author+) Sensitive Information Exposure
High
CVE-2024-5551
WP STAGING PRO - Backup Duplicator & Migration <= 5.6.0 - Cross-Site Request Forgery to Limited Local File Inclusion
Medium
CVE-2024-33595
Master Addons for Elementor <= 2.0.5.4.1 - Missing Authorization on Duplicate Post
Medium
CVE-2024-3546
WordPress Backup & Migration <= 1.4.8 - Missing Authorization to Directory Traversal
Medium
CVE-2024-31254
WordPress Backup & Migration <= 1.4.7 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2024-1368
Page Duplicator <= 0.1.1 - Missing Authorization to Unauthenticated Post/Page Duplication
Critical
CVE-2023-6592
FastDup <= 2.1.9 - Sensitive Information Exposure via Directory Listing
Medium
CVE-2023-51406
FastDup <= 2.1.7 - Sensitive Information Exposure via Log File
Medium
CVE-2023-51681
Duplicator <= 1.5.7 - Cross-Site Request Forgery via views/tools/diagnostics/information.php
Critical
CVE-2018-25095
Duplicator < 1.3.0 - Unauthenticated Remote Code Execution
Medium
CVE-2023-49835
Post Duplicator <= 2.31 - Missing Authorization via mtphr_duplicate_post
Critical
CVE-2023-6114
Duplicator <= 1.5.7 AND Duplicator Pro < 4.5.14.2 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2023-5738
WordPress Backup & Migration <= 1.4.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2023-5737
WordPress Backup & Migration <= 1.4.3 - Missing Authorization to Settings Update
Medium
CVE-2023-45636
WordPress Backup & Migration <= 1.4.1 - Missing Authorization to Settings and Schedule Modification
Medium
CVE-2023-31214
WP Quick Post Duplicator <= 2.0 - Missing Authorization
High
CVE-2023-2229
Quick Post Duplicator <= 2.0 - Authenticated (Contributor+) SQL Injection via post_id
Medium
CVE-2023-33928
WordPress Backup & Migration <= 1.4.0 - Missing Authorization via wt_delete_schedule
Medium
CVE-2023-33309
Duplicator Pro <= 4.5.11 - Reflected Cross-Site Scripting
Medium
CVE-2022-2737
WP STAGING – Backup Duplicator & Migration <= 2.9.17 - Authenticated (Administrator+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.