CVE-2026-39755

The WP Duplicate plugin versions up to 1.1.11 are vulnerable to an arbitrary file upload flaw, allowing attackers to upload malicious files to the server. This critical vulnerability poses a significant risk of remote code execution, potentially compromising the integrity and confidentiality of the affected systems. Organizations using this plugin should prioritize immediate remediation to mitigate the risk of exploitation.