Wp Duplicate – Wordpress Migration Plugin
Approved changes feed: RSS · Atom
cpe:2.3:a:revmakx:wp_duplicate_–_wordpress_migration_plugin:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Revmakx (ec04725c-9c46-5125-b426-dfc1080ff232) |
|---|---|
| Product | Wp Duplicate – Wordpress Migration Plugin (a208c290-cfd0-5191-8e65-db9bb4f55c0d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-1499 |
vulnerable | 2026-06-08 07:49:08.772612 |
WP Duplicate <= 1.1.8 - Authenticated (Subscriber+) Arbitrary File Upload via 'process_add_site' AJAX Action
HIGH (8.8)
The WP Duplicate plugin for WordPress is vulnerable to Missing Authorization leading to Arbitrary File Upload in all versions up to and including 1.1.8. This is due to a missing capability check on the `process_add_site()` AJAX action combined with path traversal in the file upload functionality. This makes it possible for authenticated (subscriber-level) attackers to set the internal `prod_key_random_id` option, which can then be used by an unauthenticated attacker to bypass authentication checks and write arbitrary files to the server via the `handle_upload_single_big_file()` function, ultimately leading to remote code execution.
Published: 2026-02-06T08:25:25.712Z
Updated: 2026-04-14T15:12:22.866Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-24652 |
vulnerable | 2026-06-08 07:12:49.668493 |
WordPress WP Duplicate plugin <= 1.1.6 - Broken Access Control vulnerability
MEDIUM (5.4)
Missing Authorization vulnerability in revmakx WP Duplicate local-sync allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Duplicate: from n/a through <= 1.1.6.
Published: 2025-01-24T17:24:38.393Z
Updated: 2026-04-28T16:11:31.280Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.