Duplicator WordPress Migration Plugin Vulnerability < 1.3.28
https://www.wordfence.comThe Duplicator – WordPress Migration Plugin has 1+ million active installations. The plugin gives users the ability to migrate, copy, move or clone a site from one location to another and also serves as a simple backup utility. In versions prior to 1.3.28, there is a vulnerability that allows attackers to download arbitrary files from victim sites.
The issue has been fixed in Version 1.3.28 which is available now from the WordPress Plugin Repo.