This patch introduces security enhancements to the Duplicator WordPress plugin by implementing hash checks in file paths to prevent arbitrary file downloads. Additionally, user interface improvements for email summaries and documentation links enhance user experience, ensuring that users have access to important resources and settings. From version 1.5.8 to version 1.5.11 (and intermediary versions). affected file: duplicator/template/admin_pages/settings/general/email_summary.php
This vulnerability affects the following application versions:
- Duplicator 1.5.6
- Duplicator 1.5.6.1
- Duplicator 1.5.7
- Duplicator 1.5.7.1
- Duplicator 1.5.8
- Duplicator 1.5.8.1
- Duplicator 1.5.9