https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-05T04:25:28.155879+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-115262 fkie_cve-2026-115262 2026-11-05T04:25:28.157526+00:00

The Duplicator WordPress plugin before 5.1.0, duplicator-pro WordPress plugin before 5.1.0 does not restrict its database charset and collation rewrite to schema statements during a restore, so a value a Subscriber stores in their own profile can break out of its string literal and inject SQL into the restore's INSERT statement when an administrator restores the backup onto a server lacking one of the source's charsets or collations.

 https://db.gcve.eu/vuln/ghsa-8p5f-q54f-ww8c GHSA-8p5f-q54f-ww8c 2026-11-05T04:25:28.157603+00:00

The Duplicator WordPress plugin before 5.1.0, duplicator-pro WordPress plugin before 5.1.0 does not restrict its database charset and collation rewrite to schema statements during a restore, so a value a Subscriber stores in their own profile can break out of its string literal and inject SQL into the restore's INSERT statement when an administrator restores the backup onto a server lacking one of the source's charsets or collations.