{"id":"CVE-2026-123751","published":"2026-11-09T07:17:30.213","lastModified":"2026-11-10T16:28:46.510","description":"The WP Duplicate  WordPress plugin through 1.1.11 does not properly verify a request authentication value and does not validate the path or type of uploaded files, making it possible for unauthenticated attackers to write arbitrary files to the server and achieve remote code execution. This vulnerability is being actively exploited in the wild.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-434"],"vendors":[],"products":[],"references":[{"url":"https://wpscan.com/vulnerability/3a3556f0-fc36-4f68-b826-406a7b4c3f9e/","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The WP Duplicate WordPress plugin (≤1.1.11) lacks proper request authentication verification and file upload validation, allowing unauthenticated attackers to upload arbitrary files—including PHP scripts—to the server, leading to remote code execution.","exploitability":"Exploitation is trivial for unauthenticated attackers due to the absence of authentication checks and input validation on the file upload endpoint.","blast_radius":"Successful exploitation grants full server compromise, enabling data theft, site defacement, or use as a pivot point for lateral movement within the hosting infrastructure.","remediation":"Upgrade to WP Duplicate plugin version 1.1.12 or later, which addresses the authentication bypass and file upload validation flaws.","detection":"Defenders should monitor WordPress debug logs and web server access logs for unexpected POST requests to wp-content/plugins/wp-duplicate/ endpoints involving file uploads (e.g., multipart/form-data with .php extensions) from unauthenticated sessions, especially with non-image file types or unusually large payloads. Also watch for newly created PHP files in upload directories not originating from legitimate WordPress admin actions.","tags":["rce","auth-bypass","file-upload","web","wordpress","active-exploit"],"model":"garnet-coder","analyzedAt":"2026-11-10T09:43:41.608Z"}}