CVE-2026-82814: PHP Object Injection in Duplicator and Duplicator Pro WordPress Plugins
The Duplicator and Duplicator Pro plugins for WordPress are vulnerable to PHP Object Injection, allowing unauthenticated attackers to potentially execute operating-system commands or delete files. Affected versions include Duplicator up to 1.5.17 and Duplicator Pro up to 4.6.10. Update to patched versions to mitigate.