CVE-2026-123751

The WP Duplicate WordPress plugin, through version 1.1.11 , is vulnerable to an unauthenticated arbitrary file upload via an authentication bypass . The flaw stems from the plugin's failure to properly verify request authentication values and its lack of validation for uploaded file types or path...