Multisite Post Duplicator <= 0.9.5.1 - Cross-Site Request Forgery (CSRF)

The Multisite Post Duplicator WordPress plugin was affected by a Cross-Site Request Forgery CSRF security vulnerability...

Post Duplicator <= 2.16 - Cross-Site Scripting (XSS)

The Post Duplicator WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

WordPress Duplicator plugin cross-site request forgery vulnerability

WordPress is the WordPress Software Foundation's suite of blogging platforms developed using the PHP language, which supports the hosting of personal blog sites on servers running PHP and MySQL.Duplicator is one of the extension plugins used to migrate/clone a site to another location. A cross-si...

WordPress Duplicator 1.1.0 / 1.2.0 Cross Site Request Forgery

----------------------------------------------------------------------------------------------- RatioSec Research Security Advisory RS-2016-002 ----------------------------------------------------------------------------------------------- Duplicator Wordpress Plugin Code And Database Dump Via CS...

WordPress Duplicator Plugin <= 1.1.3 - Cross Site Request Forgery

This plugin is prone to a cross site request forgery vulnerability. Solution Update the plugin...

Duplicator <= 1.1.3 - Cross-Site Request Forgery (CSRF)

The Duplicator – WordPress Migration Plugin WordPress plugin was affected by a Cross-Site Request Forgery CSRF security vulnerability...

WordPress Duplicator Plugin <= 0.5.26 - Cross Site Scripting

This plugin is prone to a cross site scripting vulnerability via "logname" parameter. Solution Update the plugin...

Duplicator <= 0.5.26 - Authenticated Cross-Site Scripting (XSS)

The Duplicator – WordPress Migration Plugin WordPress plugin was affected by an Authenticated Cross-Site Scripting XSS security vulnerability...

WordPress plugin Duplicator views/actions.php duplicator_delid parameter SQL injection vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL.Duplicator Plugin for WordPress is a plugin for WordPress. Duplicator Plugin for WordPress views/actions.php script handles a...

WordPress Duplicator Plugin <= 0.5.14 - SQL Injection and CSRF

Duplicator plugin is prone to an SQL injection and cross-site request forgery vulnerabilities that allow an attacker to get an authenticated admin by executing arbitrary SQL queries. Solution Upgrade the plugin...

WordPress Plugin Duplicator 0.5.14 - SQL Injection Cross-Site Request Forgery

WordPress Plugin Duplicator 0.5.14 - SQL Injection Cross-Site Request Forgery Exploit Title : Wordpress Duplicator prefix . 'duplicatorpackages'; $postIDs = isset$post'duplicatordelid' ? $post'duplicatordelid' : null; $list = explode",", $postIDs; $delCount = 0; if $postIDs != null foreach $list...

WordPress Plugin Duplicator 0.5.14 - SQL Injection / Cross-Site Request Forgery

Exploit Title : Wordpress Duplicator prefix . 'duplicatorpackages'; $postIDs = isset$post'duplicatordelid' ? $post'duplicatordelid' : null; $list = explode",", $postIDs; $delCount = 0; if $postIDs != null foreach $list as $id $getResult = $wpdb-getresults"SELECT name, hash FROM $tblName WHERE id...

WordPress Duplicator 0.5.14 Cross Site Request Forgery / SQL Injection Vulnerabilities

WordPress Duplicator plugin versions 0.5.14 and below suffer from cross site request forgery and remote SQL injection vulnerabilities. Exploit Title : Wordpress Duplicator prefix . 'duplicatorpackages'; $postIDs = isset$post'duplicatordelid' ? $post'duplicatordelid' : null; $list = explode",",...

WordPress Duplicator 0.5.14 Cross Site Request Forgery / SQL Injection

Exploit Title : Wordpress Duplicator prefix . 'duplicatorpackages'; $postIDs = isset$post'duplicatordelid' ? $post'duplicatordelid' : null; $list = explode",", $postIDs; $delCount = 0; if $postIDs != null foreach $list as $id $getResult = $wpdb-getresults"SELECT name, hash FROM $tblName WHERE id...

Duplicator <= 0.5.14 - SQL Injection & CSRF

An authorised user with "export" permission or a remote unauthenticated attacker could use this vulnerability to execute arbitrary SQL queries on the victim WordPress web site by enticing an authenticated admin CSRF. PoC http://www.example.com/wp-admin/admin-ajax.php?action=duplicatorpackagedelet...

Duplicator <= 0.5.14 - SQL Injection & CSRF

An authorised user with "export" permission or a remote unauthenticated attacker could use this vulnerability to execute arbitrary SQL queries on the victim WordPress web site by enticing an authenticated admin CSRF. http://www.example.com/wp-admin/admin-ajax.php?action=duplicatorpackagedelete PO...

Duplicator 0.5.8 - Privilege Escalation

The Duplicator – WordPress Migration Plugin WordPress plugin was affected by a Privilege Escalation security vulnerability...

WordPress Duplicator 0.5.8 Privilege Escalation

Exploit Title: Duplicator 0.5.8 Privilege Escalation Date: 21-11-2014 Software Link: https://wordpress.org/plugins/duplicator/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/ Category: webapps 1. Description Every registered user can crea...

WordPress Duplicator 0.5.8 Privilege Escalation Vulnerability

WordPress Duplicator plugin version 0.5.8 suffers from a backup related vulnerability that allows for privilege escalation. Exploit Title: Duplicator 0.5.8 Privilege Escalation Date: 21-11-2014 Software Link: https://wordpress.org/plugins/duplicator/ Exploit Author: Kacper Szurek Contact:...

WordPress Plugin Duplicator 0.5.8 - Privilege Escalation

WordPress Plugin Duplicator 0.5.8 - Privilege Escalation Exploit Title: Duplicator 0.5.8 Privilege Escalation Date: 21-11-2014 Software Link: https://wordpress.org/plugins/duplicator/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/...