Medium
CVE-2026-97197
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 63
Reset filters
Medium
CVE-2026-93527
Live Copy Paste for Elementor – Cross Domain Copy Paste & Page Duplicator <= 1.5.10 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2026-4245
Post Duplicator <= 3.0.11 - Authorization Bypass to Authenticated (Contributor+) Post Duplication
Medium
CVE-2026-4244
Post Duplicator <= 3.0.11 - Missing Authorization to Authenticated (Contributor+) Post Duplication with Arbitrary Author Attribution
Medium
CVE-2026-92991
Biggopti Library (Various Versions) - Cross-Site Scripting via display_id from Sigmative API
Medium
CVE-2026-16539
SM Page Duplicator <= 1.0.0 - Authenticated (Editor+) SQL Injection
Medium
CVE-2025-63079
Live Copy Paste for Elementor – Cross Domain Copy Paste & Page Duplicator <= 1.5.6 - Missing Authorization
High
CVE-2026-10749
Post Duplicator < 3.0.15 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2026-52703
FastDup – Fastest WordPress Migration & Duplicator <= 2.7.2 - Unauthenticated Path Traversal
High
CVE-2026-39474
Post Duplicator <= 3.0.10 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2026-2893
Page and Post Clone <= 6.3 - Authenticated (Contributor+) SQL Injection via 'meta_key' Parameter
Medium
CVE-2026-2301
Post Duplicator <= 3.0.8 - Missing Authorization to Authenticated (Contributor+) Protected Post Meta Insertion via 'customMetaData' Parameter
High
CVE-2026-1104
FastDup – Fastest WordPress Migration & Duplicator <= 2.7.1 - Missing Authorization to Authenticated (Contributor+) Backup Creation and Download
Medium
CVE-2026-24387
WP Quick Post Duplicator <= 2.1 - Missing Authorization
Medium
CVE-2026-0604
FastDup <= 2.7 - Authenticated (Contributor+) Path Traversal via 'dir_path' REST Parameter
Medium
CVE-2025-52760
MultiSite Clone Duplicator <= 1.5.3 - Reflected Cross-Site Scripting
Medium
CVE-2025-32567
Easy Post Duplicator <= 1.0.1 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2025-32538
Easy Post Duplicator <= 1.0.1 - Reflected Cross-Site Scripting
Medium
CVE-2025-31809
Labinator Content Types Duplicator <= 1.1.3 - Cross-Site Request Forgery
Medium
CVE-2025-31845
Theme Duplicator <= 1.1 - Cross-Site Request Forgery
Medium
CVE-2025-30543
Menu Duplicator <= 1.0 - Missing Authorization
Medium
CVE-2025-28884
WP Bulk Post Duplicator <= 1.2 - Cross-Site Request Forgery
High
CVE-2025-27282
Theme File Duplicator <= 1.3 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2025-27283
Theme File Duplicator <= 1.3 - Authenticated (Subscriber+) Arbitrary File Download
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.