The Duplicator plugin for WordPress which gives the administrators the capability to backup, migrate or copy their entire site with a single button has been noted as vulnerable.
Link: WordPress “Backup” Duplicator Plugin is vulnerable [UPGRADE IMMEDIATLY]