CVE-2022-2552 Duplicator < 1.4.7.1 - Unauthenticated System Information Disclosure

2022-08-2215:04:02

WPScan

www.cve.org

cve-2022-2552

duplicator

wordpress plugin

unauthenticated

system information disclosure

EPSS

0.017

Percentile

87.9%

JSON

The Duplicator WordPress plugin before 1.4.7 does not authenticate or authorize visitors before displaying information about the system such as server software, php version and full file system path to the site.

CNA Affected

[
  {
    "vendor": "Unknown",
    "product": "Duplicator",
    "versions": [
      {
        "status": "affected",
        "versionType": "custom",
        "version": "0",
        "lessThan": "1.4.7"
      }
    ],
    "defaultStatus": "unaffected",
    "collectionURL": "https://wordpress.org/plugins"
  }
]