medium5.3
CVE-2023-6592
The FastDup WordPress plugin before 2.2 does not prevent directory listing in sensitive directories containing export files.
Impact
The FastDup WordPress plugin before 2.2 does not prevent directory listing in sensitive directories containing export files.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ninjateam | Fastdup | before 2.2 |
References
- NVD record
- CVE.org record
- https://research.cleantalk.org/cve-2023-6592-fastdup-database-users-password-leak-poc-exploit/
- https://wpscan.com/vulnerability/a39bb807-b143-4863-88ff-1783e407d7d4/
- https://research.cleantalk.org/cve-2023-6592-fastdup-database-users-password-leak-poc-exploit/
- https://wpscan.com/vulnerability/a39bb807-b143-4863-88ff-1783e407d7d4/