CVE-2026-39755

revmakx WP Duplicate

Published 6 Oct 2026 · updated 6 Oct 2026 · Deferred

9.9 Critical · CVSS 3.1, patchstack.com

Description

Subscriber Arbitrary File Upload in WP Duplicate <= 1.1.11 versions.

References

patchstack.com/database/wordpress/plugin/local-sync/vulnerability/wordpress-wp-duplicate-plugin-1-1-11-arbitrary-file-upload-vulnerability?_s_id=cve