Skip to content

CVE-2026-82814

CVE

Threat entity extracted from intelligence sources

Frequency
1
occurrences
First Seen
October 20, 2026
Last Seen
October 20, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

High Severity PHP Object Injection Vulnerability in Duplicator Plugin Discovered55.0

On August 30, 2026, Wordfence discovered a high severity unauthenticated PHP Object Injection vulnerability in the Duplicator and Duplicator Pro plugins, tracked as CVE-2026-82814, with a CVSS score of 8.8. This vulnerability affects over one million active installations of Duplicator, allowing unau...

Public Exploits

Checking GitHub for proof-of-concept code…

CVE Details

Related Entities

Zero-day ExploitCWE-502 - Deserialization Of Untrusted DataT1059 - Command and Scripting InterpreterDuplicatorWordPressRequests LibraryWordfence ArgusUnauthenticated PHP Object Injection