CVE-2026-82814: Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More 0 through 1.5.17; +1 more affected…

Affected technology

Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More · 0 through 1.5.17
smub

Duplicator Pro · 0 through 4.6.10
Duplicator

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Network (remote) · No privileges required · User interaction required

What an attacker can do

Unauthenticated attackers can store a serialized object in public site content before an administrator builds a package and later performs a migration or import that runs database search-and-replace. Vendor/CNA’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high.