PULSE
ESPT
FEED
ransomscarlettgroup reclama a rrh.org · Healthcareransomn0n reclama a Company #197 · USransomn0n reclama a Company #196 · USransomn0n reclama a Company #195 · USransomn0n reclama a Company #194 · USransomn0n reclama a Company #193 · USransomn0n reclama a Company #192 · USransomn0n reclama a Company #191 · USransomn0n reclama a Company #190 · CAransomn0n reclama a Company #189 · GBransomn0n reclama a Company #188 · USransomn0n reclama a Company #187 · CAransomn0n reclama a Company #186 · CAransomn0n reclama a Company #185 · USransomscarlettgroup reclama a rrh.org · Healthcareransomn0n reclama a Company #197 · USransomn0n reclama a Company #196 · USransomn0n reclama a Company #195 · USransomn0n reclama a Company #194 · USransomn0n reclama a Company #193 · USransomn0n reclama a Company #192 · USransomn0n reclama a Company #191 · USransomn0n reclama a Company #190 · CAransomn0n reclama a Company #189 · GBransomn0n reclama a Company #188 · USransomn0n reclama a Company #187 · CAransomn0n reclama a Company #186 · CAransomn0n reclama a Company #185 · US
← All CVEs
CVE WatchNov 9, 2026

CVE-2026-123751

The WP Duplicate WordPress plugin through 1.1.11 does not properly verify a request authentication value and does not validate the path or

CVSS

—

No CVSS

EPSS

—

KEV

—

Exploit Today

—

0-100

Published: Nov 9, 2026 · Last modified: Nov 9, 2026

EPSS · 30d

Not enough EPSS history yet.

Technical description

The WP Duplicate WordPress plugin through 1.1.11 does not properly verify a request authentication value and does not validate the path or type of uploaded files, making it possible for unauthenticated attackers to write arbitrary files to the server and achieve remote code execution. This vulnerability is being actively exploited in the wild.

Official references
Related CVEs

No related CVEs by CWE or product.