CVE-2017-16815

The CVE-2017-16815 vulnerability affects the WordPress Duplicator plugin (installer.php) prior to 1.2.30, where unfiltered values in url_new and logging (installer/build/view.step4.php and installer/build/view.step2.php) enable cross-site scripting. This is an XSS in affected plugin versions (not...

CVE-2014-9262

The WordPress Duplicator plugin is affected: versions before 0.5.10 allow remote authenticated users to create and download backup files. This represents a privilege/permission issue that can expose site data. Impact is limited to authenticated users and backups; no mention of remote unauthentica...