PULSE
ESEN
FEED
ransomn0n reclama a Company #189 · GBransomn0n reclama a Company #188 · USransomn0n reclama a Company #187 · CAransomn0n reclama a Company #186 · CAransomn0n reclama a Company #185 · USransomn0n reclama a Company #184 · USransomn0n reclama a Company #183 · USransomn0n reclama a Company #182 · CAransomn0n reclama a Company #181 · USransomn0n reclama a Company #180 · USransomn0n reclama a Company #179 · CAransomn0n reclama a Company #178 · USransomn0n reclama a Company #177 · CAransomn0n reclama a Company #176 · CAransomn0n reclama a Company #189 · GBransomn0n reclama a Company #188 · USransomn0n reclama a Company #187 · CAransomn0n reclama a Company #186 · CAransomn0n reclama a Company #185 · USransomn0n reclama a Company #184 · USransomn0n reclama a Company #183 · USransomn0n reclama a Company #182 · CAransomn0n reclama a Company #181 · USransomn0n reclama a Company #180 · USransomn0n reclama a Company #179 · CAransomn0n reclama a Company #178 · USransomn0n reclama a Company #177 · CAransomn0n reclama a Company #176 · CA
← Todos os CVEs
CVE Watch9 de nov. de 2026

CVE-2026-123751

The WP Duplicate WordPress plugin through 1.1.11 does not properly verify a request authentication value and does not validate the path or

CVSS

—

Sem CVSS

EPSS

—

KEV

—

Exploit Today

—

0-100

Publicado: 9 de nov. de 2026 · Última mod.: 9 de nov. de 2026

EPSS · 30d

Ainda não há histórico EPSS suficiente.

Descrição técnica

The WP Duplicate WordPress plugin through 1.1.11 does not properly verify a request authentication value and does not validate the path or type of uploaded files, making it possible for unauthenticated attackers to write arbitrary files to the server and achieve remote code execution. This vulnerability is being actively exploited in the wild.

Referências oficiais
CVEs relacionados

Nenhum CVE relacionado por CWE ou produto.