Critical
CVE-2022-2551
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 63
Reset filters
High
CVE-2022-2552
Duplicator – WordPress Migration Plugin <= 1.4.7 - Sensitive Information Disclosure
Medium
CVE-2021-33852
Post Duplicator <= 2.23 - Cross-Site Scripting
High
9f9e5212-caed-46db-bbf2-81c4df88439f
LearnPress – WordPress LMS Plugin <= 3.2.7.2 - SQL Injection
High
Exploited in attacks
CVE-2020-11738
Duplicator < 1.3.28 - Directory Traversal
Critical
CVE-2018-17207
Duplicator <= 1.2.41 - Sensitive Information Disclosure leading to Remote Code Execution
Medium
CVE-2018-7543
Duplicator <= 1.2.32 - Cross-Site Scripting
Medium
CVE-2017-16815
Duplicator <= 1.2.28 – Unauthenticated Stored Cross-Site Scripting
High
CVE-2016-10944
Multisite Post Duplicator <= 1.7.6 - Cross-Site Request Forgery
Medium
CVE-2016-15027
Post Duplicator <= 2.16 - Reflected Cross-Site Scripting
Medium
3f753961-3eeb-402d-876f-4a4dea41a96a
Duplicator < 1.1.4 - Cross-Site Request Forgery
Medium
06905738-7e1c-4d1a-97d2-f68f978ad8ed
Duplicator <= 0.5.26 - Authenticated (Admin+) Cross-Site Scripting
High
3762cd92-604a-4dac-a09e-6b4a08c4d804
Duplicator <= 0.5.14 - SQL Injection
High
CVE-2014-9262
Duplicator < 0.5.10 - Arbitrary Backup Creation and Download
Medium
CVE-2013-4625
Duplicator – WordPress Migration Plugin <= 0.4.4 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.