medium5.3Public exploit code
CVE-2022-2552
The Duplicator WordPress plugin before 1.4.7 does not authenticate or authorize visitors before displaying information about the system such as server software…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- WordPress Plugin Duplicator 1.4.7 - Information Disclosure2022-08-01 · webapps · php · Verified
Impact
The Duplicator WordPress plugin before 1.4.7 does not authenticate or authorize visitors before displaying information about the system such as server software, php version and full file system path to the site.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Awesomemotive | Duplicator | before 1.4.7.1 |