WP Duplicate
Limited data: WP Duplicate has under 1,000 active installs and less than 12 weeks of history, so we do not rate it yet.
Capped at 39: a vulnerability has no patch.
| Ownership | 100 |
|---|---|
| Maintenance | 85 |
| Security | 15 |
| Support | No data |
| Reputation | No data |
Quick answers
- Is WP Duplicate still maintained?
- Yes. Last release 16 Jun 2026, 5 releases in the last 24 months. 16 Jun 2026 · wordpress.org
- Who owns WP Duplicate, and has it changed hands?
- No change recorded. Main committer revmakx since Jan 2025. 3 Nov 2026 · SVN log
- Was WP Duplicate removed from wordpress.org?
- No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
- Is WP Duplicate safe?
- No. 1 known vulnerability has no fix in the current version. 5 Oct 2026 · Wordfence Intelligence
- Is the latest WP Duplicate update safe to install?
- No ownership change before 1.1.11. No one-star spike after it. 16 Jun 2026 · Release history
Active signals
Facts we detected, with links to the source.
- CriticalSEC-2Vulnerability published 5 Oct 2026 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.19 Oct 2026Evidence
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| plugin-master | 6 Feb 2020 to 6 Feb 2020, 1 commits |
|---|---|
| localsync | 17 Feb 2020 to 21 Sep 2023, 28 commits |
| revmakx | 6 Jan 2025 to 16 Jun 2026, 10 commits |
3 committers recorded. No ownership change since 2020.
Maintenance
- Last release
- 5 months ago
- Releases, 24 months
- 5
- Tested up to
- 7.0 vs 7.1
- Requires PHP
- not stated supported 8.2+
| Q1 2024 | 0 |
|---|---|
| Q2 2024 | 0 |
| Q3 2024 | 0 |
| Q4 2024 | 0 |
| Q1 2025 | 1 |
| Q2 2025 | 0 |
| Q3 2025 | 0 |
| Q4 2025 | 1 |
| Q1 2026 | 2 |
| Q2 2026 | 1 |
| Q3 2026 | 0 |
| Q4 2026 | 0 |
Last release 16 Jun 2026. Tested up to 7.0, 1 major version behind WordPress 7.1.
Reputation
Last 90 days: no reviews. Lifetime: 3.3.
| 5 star | 4 |
|---|---|
| 4 star | 0 |
| 3 star | 0 |
| 2 star | 0 |
| 1 star | 3 |
Security record
3 vulnerabilities in 24 months, 1 with no fix in the current version.
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 5 Oct 2026 | WP Duplicate - WordPress Migration Plugin <= 1.1.11 - Authenticated (Subscriber+) Arbitrary File Upload | 8.8 | <= 1.1.11 | No fix | n/a |
Show 2 patched vulnerabilities
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 5 Feb 2026 | WP Duplicate <= 1.1.8 - Authenticated (Subscriber+) Arbitrary File Upload via 'process_add_site' AJAX Action | 8.8 | <= 1.1.8 | 1.1.9 | n/a |
| 24 Jan 2025 | WP Duplicate - WordPress Migration Plugin <= 1.1.6 - Missing Authorization | 4.3 | <= 1.1.6 | 1.1.7 | n/a |
Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.
Support
Support history appears after our first snapshots of the forum counts.
Momentum
200+ active installs. History builds with each weekly snapshot.
Momentum history builds with each snapshot.
Healthier alternatives
Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.
No healthier plugin in the same category yet.
Facts
| Version | 1.1.11 |
|---|---|
| Author | revmakx |
| Added | 17 Feb 2020 |
| Last updated | 16 Jun 2026 |
| Active installs | 200+ |
| Requires WordPress | 3.0.1 |
| Tested up to | 7.0.8 |
| Requires PHP | not stated |
| Category | not stated |
| Tags | clone, migrate, copy site, wpduplicate, wp duplicate |
Other plugins by this author: InfiniteWP Client, Backup and Staging by WP Time Capsule, DefendWP Firewall, WPCal.io - Easy Meeting Scheduler, Super Stage WP, Kiss Feedback, Matram.io
Questions
Is WP Duplicate still maintained?
Yes. Last release 16 Jun 2026, 5 releases in the last 24 months.
Who owns WP Duplicate, and has it changed hands?
No change recorded. Main committer revmakx since Jan 2025.
Was WP Duplicate removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026.
Is WP Duplicate safe?
No. 1 known vulnerability has no fix in the current version.
Is the latest WP Duplicate update safe to install?
No ownership change before 1.1.11. No one-star spike after it.