The Duplicator WordPress plugin before 1.4.7 does not authenticate or authorize visitors before displaying information about the system such as server software, php version and full file system path to the site.
References
| Link | Resource |
|---|---|
| https://github.com/SecuriTrust/CVEsLab/tree/main/CVE-2022-2552 | Exploit Third Party Advisory |
| https://wpscan.com/vulnerability/6b540712-fda5-4be6-ae4b-bd30a9d9d698 | Exploit Third Party Advisory |
Configurations
History
04 Jul 2023, 10:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-306 |
27 Jun 2023, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | The Duplicator WordPress plugin before 1.4.7 does not authenticate or authorize visitors before displaying information about the system such as server software, php version and full file system path to the site. | |
| CWE | CWE-862 |
23 Aug 2022, 18:59
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-287 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.3 |
| CPE | cpe:2.3:a:snapcreek:duplicator:*:*:*:*:lite:wordpress:*:* | |
| References | (MISC) https://github.com/SecuriTrust/CVEsLab/tree/main/CVE-2022-2552 - Exploit, Third Party Advisory | |
| References | (MISC) https://wpscan.com/vulnerability/6b540712-fda5-4be6-ae4b-bd30a9d9d698 - Exploit, Third Party Advisory |
22 Aug 2022, 16:35
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-08-22 15:15
Updated : 2024-02-04 22:51
NVD link : CVE-2022-2552
Mitre link : CVE-2022-2552
CVE.ORG link : CVE-2022-2552
JSON object : View
Products Affected
snapcreek
- duplicator