To plugin page

Fixed

WordPress Duplicator plugin <= 1.4.7 - Unauthenticated System Information Disclosure vulnerability

5.3

CVSS 3.1 score Medium severity

Report

Monitoring Not reported to be exploited

Find out about vulnerable plugins in your websites for free.

Scan your website

Software

Duplicator

Type

Plugin

Vulnerable versions

<= 1.4.7

Fixed in

1.4.7.1

PSID

c034bfbb8fbd

CVE ID

CVE-2022-2552

Classification

Sensitive Data Exposure

OWASP Top 10

A3: Sensitive Data Exposure

Required privilege

Can be exploited remotely without any authentication.

Credits

Ihsan Sencan

Publicly disclosed

2022-08-04

Details

Unauthenticated System Information Disclosure vulnerability discovered by Ihsan Sencan in WordPress Duplicator plugin (versions <= 1.4.7).

Solution

Update the WordPress Duplicator plugin to the latest available version (at least 1.4.7.1).

References

Vulnerability details Vulnerability details

WordPress Duplicator plugin <= 1.4.7 - Unauthenticated System Information Disclosure vulnerability

Details

Solution

References

Other known vulnerabilities for Duplicator

Submit vulnerabilities and become a verified Alliance member

All solutions

WordPress security

Patchstack

Social

All solutions

WordPress Security

Patchstack

Social

© 2022 Patchstack

WordPress Duplicator plugin <= 1.4.7 - Unauthenticated System Information Disclosure vulnerability

Details

Solution

References

Other known vulnerabilities for Duplicator

Submit vulnerabilities and become a verified Alliance member

All solutions

WordPress security

Patchstack

Social

All solutions

WordPress Security

Patchstack

Social

© 2022 Patchstack

Let us know if we have missed a vulnerability reported elsewhere

Thank you for contributing!