CVE-2018-7543: Awesomemotive Duplicator

Medium severity, CVSS 6.1. EPSS: 3.3% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in installer/build/view.step4.php of the SnapCreek Duplicator plugin 1.2.32 for WordPress allows remote attackers to inject arbitrary JavaScript or HTML via the json parameter.

Affected products

• Awesomemotive Duplicator: version 1.2.32 only

Published 2018-03-26. Last modified 2026-06-17.