Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More

WordPress plugin · duplicator · WordPress.org ↗

Latest v5.1.1 Last release Nov 3, 2026 Tested up to WP 7.1.4 1,000,000+ active installs

Critical

High

Known total

Unfixed

Running Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More on your site? WP Alerts checks your installed version against every entry below and emails you only when one affects you. Free, no tracking.

Scan a site Monitor my sites →

Severity	Vulnerability	Affected	Fixed in	CVE	Published
CRITICAL CVSS 9.8	Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More [duplicator] < 1.3.0 WPVulnerability · PoC available	< 1.3.0	v1.3.0	CVE-2018-25095	Dec 15, 2023
CRITICAL CVSS 9.8	Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More [duplicator] < 1.2.42 WPVulnerability	< 1.2.42	v1.2.42	CVE-2018-17207	Aug 29, 2018
HIGH CVSS 7.2	Duplicator 1.5.17 - Multisite Subsite Admin+ Network-Wide PHP Code Execution via One-Click Upgrade CVE.org	>=1.5.17, <5.0.0	v5.0.0	CVE-2026-115251	Oct 25, 2026
HIGH CVSS 8.8	Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More [duplicator] < 5.0.0 WPVulnerability	< 5.0.0	v5.0.0	CVE-2026-82814	Oct 21, 2026
HIGH CVSS 7.5	Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More [duplicator] < 1.5.7.1 WPVulnerability	< 1.5.7.1	v1.5.7.1	CVE-2023-6114	Dec 4, 2023
HIGH CVSS 7.5	Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More [duplicator] < 1.4.7.1 WPVulnerability	< 1.4.7.1	v1.4.7.1	CVE-2022-2551	Jul 27, 2022
HIGH CVSS 7.5	Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More [duplicator] < 1.3.28 WPVulnerability · actively exploited · PoC available	< 1.3.28	v1.3.28	CVE-2020-11738	Feb 28, 2020
HIGH CVSS 8.2	Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More [duplicator] < 0.5.10 WPVulnerability	< 0.5.10	v0.5.10	CVE-2014-9262	Feb 19, 2015
MEDIUM CVSS 4.8	Duplicator < 5.1.0 - Subscriber+ SQLi via Charset and Collation Rewriter During Restore CVE.org	>=0, <5.1.0	v5.1.0	CVE-2026-115262	Nov 4, 2026
MEDIUM CVSS 5.3	Duplicator 5.0.0 - 5.0.6 - Unauthenticated Full Path Disclosure via Installer Entry Points CVE.org	>=5.0.0, <5.1.0	v5.1.0	CVE-2026-112244	Nov 4, 2026
MEDIUM CVSS 5.8	Duplicator < 5.1.0 - Reflected XSS via 'logname' Parameter CVE.org	>=0, <5.1.0	v5.1.0	CVE-2026-112243	Nov 4, 2026
MEDIUM CVSS 5.3	Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More [duplicator] < 1.5.10 WPVulnerability	< 1.5.10	v1.5.10	CVE-2024-6210	Jul 10, 2024
MEDIUM CVSS 6.5	Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More [duplicator] < 1.5.7.1 WPVulnerability	< 1.5.7.1	v1.5.7.1	CVE-2023-51681	Dec 27, 2023
MEDIUM CVSS 5.3	Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More [duplicator] < 1.4.7.1 WPVulnerability	< 1.4.7.1	v1.4.7.1	CVE-2022-2552	Jul 27, 2022
MEDIUM CVSS 6.1	Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More [duplicator] < 1.2.33 WPVulnerability	< 1.2.33	v1.2.33	CVE-2018-7543	Mar 15, 2018
MEDIUM CVSS 6.1	Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More [duplicator] < 1.2.30 WPVulnerability	< 1.2.30	v1.2.30	CVE-2017-16815	Nov 7, 2017
NONE CVSS 0.0	Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More [duplicator] < 0.4.5 WPVulnerability	< 0.4.5	v0.4.5	CVE-2013-4625	Aug 9, 2013
UNKNOWN	Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More [duplicator] < 5.0.0 WPVulnerability	< 5.0.0	v5.0.0	CVE-2026-115251	Oct 25, 2026
UNKNOWN	Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More [duplicator] < 1.3.28 WPVulnerability	< 1.3.28	v1.3.28	—	Feb 20, 2020
UNKNOWN	Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More [duplicator] < 1.2.42 WPVulnerability	< 1.2.42	v1.2.42	—	Sep 5, 2018
UNKNOWN	Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More [duplicator] < 1.1.4 WPVulnerability	< 1.1.4	v1.1.4	—	Feb 11, 2016
UNKNOWN	Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More [duplicator] < 1.1.4 WPVulnerability	< 1.1.4	v1.1.4	—	Feb 9, 2016
UNKNOWN	Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More [duplicator] < 0.5.28 WPVulnerability	< 0.5.28	v0.5.28	—	Nov 22, 2015
UNKNOWN	Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More [duplicator] < 0.5.28 WPVulnerability	< 0.5.28	v0.5.28	—	Aug 15, 2015
UNKNOWN	Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More [duplicator] < 0.5.15 WPVulnerability	< 0.5.15	v0.5.15	—	Apr 13, 2015
UNKNOWN	Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More [duplicator] < 0.5.16 WPVulnerability	< 0.5.16	v0.5.16	—	Apr 10, 2015
UNKNOWN	Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More [duplicator] < 0.4.5 WPVulnerability	< 0.4.5	v0.4.5	—	Jul 24, 2013
UNKNOWN	Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More [duplicator] < 0.5.16 WPVulnerability	< 0.5.16	v0.5.16	—	—
UNKNOWN	Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More [duplicator] < 0.5.28 WPVulnerability	< 0.5.28	v0.5.28	—	—
UNKNOWN	Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More [duplicator] < 1.1.4 WPVulnerability	< 1.1.4	v1.1.4	—	—
UNKNOWN	Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More [duplicator] < 1.2.42 WPVulnerability	< 1.2.42	v1.2.42	—	—

Data aggregated from WPVulnerability, NVD/NIST, ENISA EUVD, CVE.org and WordPress.org. Provided as-is; verify with the plugin author before acting. Disclaimer.