| Reporter | Title | Published | Views | Family All 7 |
|---|---|---|---|---|
| WordPress Duplicator 0.5.8 Privilege Escalation Vulnerability | 18 Feb 201500:00 | – | zdt | |
| Wordpress Duplicator Elevation of Privilege Vulnerability | 8 Aug 201700:00 | – | cnvd | |
| CVE-2014-9262 | 7 Aug 201717:00 | – | cvelist | |
| EUVD-2014-9087 | 7 Oct 202500:30 | – | euvd | |
| CVE-2014-9262 | 7 Aug 201717:29 | – | nvd | |
| Design/Logic Flaw | 7 Aug 201717:29 | – | prion | |
| Duplicator 0.5.8 - Privilege Escalation | 19 Feb 201500:00 | – | wpvulndb |
| Source | Link |
|---|---|
| exploit-db | www.exploit-db.com/exploits/36112/ |
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| action | query param | /wp-admin/admin-ajax.php?action=duplicator_package_scan | Authenticated users can trigger a scan via AJAX to enumerate/create backup data. | CWE-264 |
| action | query param | /wp-admin/admin-ajax.php?action=duplicator_package_build | Authenticated users can trigger backup creation via AJAX, potentially exposing backup files. | CWE-264 |
| action | query param | /wp-admin/admin-ajax.php?action=duplicator_package_delete | Authenticated users can delete backup package data via AJAX, enabling manipulation of backups. | CWE-264 |
| action | query param | /wp-admin/admin-ajax.php?action=duplicator_package_report | Authenticated users can request backup reports via AJAX, which may expose backup metadata. | CWE-264 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation