CVE-2026-115251

The Duplicator WordPress plugin (versions before 5.0.0 ) contains a vulnerability where its one-click upgrade routine is neither restricted to authorized users nor protected by authentication. This flaw allows an administrator of a multisite child site who lacks network administrator privileges t...