pro vulnerabilities
CVEs whose affected-version data names the pro package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-82814High· 8.8Duplicator <= 1.5.17 and Duplicator Pro <= 4.6.10 - Unauthenticated PHP Object Injection
The Duplicator and Duplicator Pro plugins for WordPress are vulnerable to PHP Object Injection in all versions up to, and including, 1.5.17 and 4.6.10, respectively, via deserialization of untrusted database content in DUPX_UpdateEngine:…
▾ Twilightsmub · Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & Morevia CVEORG
CVE-2026-66481Medium· 6.8Author Arbitrary File Deletion in Presto Player Pro <= 3.0.1 versions.
Author Arbitrary File Deletion in Presto Player Pro <= 3.0.1 versions.
▾ SunlitPresto Player · Presto Player ProEPSS 0.33%via NVD