WordPress Plugin Vulnerabilities

Duplicator - installer.cleanup.php package Parameter XSS

Description

The Duplicator – WordPress Migration Plugin WordPress plugin was affected by an installer.cleanup.php package Parameter XSS security vulnerability.

Affects Plugins

Plugin icon
duplicator
Fixed in 0.4.5

References

CVE
CVE-2013-4625
URL
https://packetstormsecurity.com/files/#122535/

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
0f3fc09b-f736-474e-a3e8-37ead77479c1

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2024-11-19
Title
LeanPress <= 1.0.0 - Reflected Cross-Site Scripting
Published
2025-02-18
Title
UltraEmbed – Advanced Iframe Plugin For WordPress with Gutenberg Block Included <= 1.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2026-02-17
Title
WP 404 Auto Redirect < 1.0.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Published
2024-11-25
Title
Multiple Plugins from CreativeMindsSolutions - Reflected XSS
Published
2023-04-19
Title
WP-dTree <= 4.4.5 - Admin+ Stored XSS