https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-05T04:08:57.741795+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-112244 fkie_cve-2026-112244 2026-11-05T04:08:57.759572+00:00

The Duplicator WordPress plugin before 5.1.0, duplicator-pro WordPress plugin before 5.1.0 does not prevent direct access to some of its bundled PHP files, which initialise without their expected context, trigger a fatal error, and return a stack trace that discloses the server's absolute filesystem paths to unauthenticated users.

 https://db.gcve.eu/vuln/ghsa-v2q9-hw4w-2v6m GHSA-v2q9-hw4w-2v6m 2026-11-05T04:08:57.759655+00:00

The Duplicator WordPress plugin before 5.1.0, duplicator-pro WordPress plugin before 5.1.0 does not prevent direct access to some of its bundled PHP files, which initialise without their expected context, trigger a fatal error, and return a stack trace that discloses the server's absolute filesystem paths to unauthenticated users.