CVE-2026-39755CRITICAL NVDCVSS Score 9.9Severity CRITICALPublished Oct 06, 2026Vendor unknownDescriptionSubscriber Arbitrary File Upload in WP Duplicate <= 1.1.11 versions.Referenceshttps://patchstack.com/database/wordpress/plugin/local-sync/vulnerability/wordpress-wp-duplicate-plugin-1-1-11-arbitrary-file-upload-vulnerability?_s_id=cve