CVE-2023-51681: WordPress Duplicator Plugin <= 1.5.7 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery (CSRF) vulnerability in Duplicator Duplicator – WordPress Migration & Backup Plugin.This issue affects Duplicator – WordPress Migration & Backup Plugin: from n/a through 1.5.7.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2023-51681?
CVE-2023-51681 is classified as a Cross-Site Request Forgery (CSRF) vulnerability.
How do I fix CVE-2023-51681?
To mitigate CVE-2023-51681, update the Duplicator – WordPress Migration & Backup Plugin to the latest version beyond 1.5.7.
What versions are affected by CVE-2023-51681?
CVE-2023-51681 affects Duplicator – WordPress Migration & Backup Plugin versions up to and including 1.5.7.
What is Cross-Site Request Forgery in the context of CVE-2023-51681?
Cross-Site Request Forgery (CSRF) allows attackers to make unauthorized actions on behalf of an authenticated user.
Is my website vulnerable if I use an older version of the Duplicator plugin?
Yes, if you are using Duplicator – WordPress Migration & Backup Plugin version 1.5.7 or earlier, your website is vulnerable to CVE-2023-51681.