Lucene search
K

36 matches found

Nuclei
Nuclei
added 9 hours ago8 views

WordPress FastDup <= 2.1.9 Sensitive Information Exposure - Directory Listing

FastDup WordPress plugin 2.2 contains a directory listing vulnerability caused by lack of access restrictions in sensitive directories, letting attackers view export files, exploit requires no authentication. id: CVE-2023-6592 info: name: WordPress FastDup = 2.1.9 Sensitive Information Exposure -...

5.3CVSS6.6AI score0.04397EPSS
Exploits1References4
Patchstack
Patchstack
added 2026/02/12 10:28 p.m.5 views

WordPress FastDup - Fastest WordPress Migration & Duplicator plugin <= 2.7.1 - Missing Authorization to Authenticated (Contributor+) Backup Creation and Download vulnerability

WordPress FastDup - Fastest WordPress Migration & Duplicator plugin = 2.7.1 - Missing Authorization to Authenticated Contributor+ Backup Creation and Download vulnerability discovered by WordFence in WordPress Plugin FastDup versions = 2.7.1...

8.8CVSS5.5AI score0.00055EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2026/02/12 3:16 p.m.1 views

CVE-2026-1104

The FastDup – Fastest WordPress Migration & Duplicator plugin for WordPress is vulnerable to unauthorized backup creation and download due to a missing capability check on REST API endpoints in all versions up to, and including, 2.7.1. This makes it possible for authenticated attackers, with...

8.8CVSS0.00055EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/02/12 2:25 p.m.24 views

CVE-2026-1104 FastDup – Fastest WordPress Migration & Duplicator <= 2.7.1 - Missing Authorization to Authenticated (Contributor+) Backup Creation and Download

The FastDup – Fastest WordPress Migration & Duplicator plugin for WordPress is vulnerable to unauthorized backup creation and download due to a missing capability check on REST API endpoints in all versions up to, and including, 2.7.1. This makes it possible for authenticated attackers, with...

8.8CVSS0.00055EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2026/02/12 2:25 p.m.2 views

CVE-2026-1104

The FastDup – Fastest WordPress Migration & Duplicator plugin for WordPress is vulnerable to unauthorized backup creation and download due to a missing capability check on REST API endpoints in all versions up to, and including, 2.7.1. This makes it possible for authenticated attackers, with...

8.8CVSS5.5AI score0.00055EPSS
Exploits0References4
CVE
CVE
added 2026/02/12 2:25 p.m.10 views

CVE-2026-1104

CVE-2026-1104 affects the FastDup – Fastest WordPress Migration & Duplicator plugin for WordPress. The vulnerability is due to a missing capability check on REST API endpoints across all versions up to and including 2.7.1, enabling authenticated attackers with Contributor-level access and above t...

8.8CVSS5.5AI score0.00055EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/02/12 12:0 a.m.2 views

PT-2026-7851

The FastDup – Fastest WordPress Migration & Duplicator plugin for WordPress is vulnerable to unauthorized backup creation and download due to a missing capability check on REST API endpoints in all versions up to, and including, 2.7.1. This makes it possible for authenticated attackers, with...

8.8CVSS5.5AI score0.00055EPSS
Exploits0References4
CNNVD
CNNVD
added 2026/02/12 12:0 a.m.2 views

WordPress plugin FastDup 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

8.8CVSS5.8AI score0.00055EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2026/01/07 9:15 a.m.2 views

CVE-2026-0604

The FastDup – Fastest WordPress Migration & Duplicator plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 2.7 via the 'dirpath' parameter in the 'njt-fastdup/v1/template/directory-tree' REST API endpoint. This makes it possible for authenticated attackers,...

6.5CVSS5.9AI score0.00046EPSS
Exploits0References1
Patchstack
Patchstack
added 2026/01/06 6:18 a.m.3 views

WordPress FastDup plugin <= 2.7 - Authenticated (Contributor+) Path Traversal via 'dir_path' REST Parameter vulnerability

Authenticated Contributor+ Path Traversal via 'dirpath' REST Parameter vulnerability discovered by Athiwat Tiprasaharn Jitlada in WordPress Plugin FastDup versions = 2.7...

6.5CVSS6.9AI score0.00046EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2026/01/06 4:15 a.m.2 views

CVE-2026-0604

The FastDup – Fastest WordPress Migration & Duplicator plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 2.7 via the 'dirpath' parameter in the 'njt-fastdup/v1/template/directory-tree' REST API endpoint. This makes it possible for authenticated attackers,...

6.5CVSS0.00046EPSS
Exploits0References4
CVE
CVE
added 2026/01/06 3:21 a.m.14 views

CVE-2026-0604

CVE-2026-0604 affects the WordPress plugin FastDup – Fastest WordPress Migration & Duplicator via a Path Traversal flaw in the REST endpoint njt-fastdup/v1/template/directory-tree. An authenticated attacker with at least Contributor+ privileges can read contents of arbitrary server directories th...

6.5CVSS5.5AI score0.00046EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2026/01/06 3:21 a.m.1 views

CVE-2026-0604 FastDup <= 2.7 - Authenticated (Contributor+) Path Traversal via 'dir_path' REST Parameter

The FastDup – Fastest WordPress Migration & Duplicator plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 2.7 via the 'dirpath' parameter in the 'njt-fastdup/v1/template/directory-tree' REST API endpoint. This makes it possible for authenticated attackers,...

6.5CVSS5.5AI score0.00046EPSS
Exploits0References4
Cvelist
Cvelist
added 2026/01/06 3:21 a.m.21 views

CVE-2026-0604 FastDup <= 2.7 - Authenticated (Contributor+) Path Traversal via 'dir_path' REST Parameter

The FastDup – Fastest WordPress Migration & Duplicator plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 2.7 via the 'dirpath' parameter in the 'njt-fastdup/v1/template/directory-tree' REST API endpoint. This makes it possible for authenticated attackers,...

6.5CVSS0.00046EPSS
Exploits0References4
CNNVD
CNNVD
added 2026/01/06 12:0 a.m.1 views

WordPress plugin FastDup 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A path travers...

6.5CVSS6.5AI score0.00046EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2026/01/06 12:0 a.m.2 views

PT-2026-1404

Name of the Vulnerable Software and Affected Versions FastDup – Fastest WordPress Migration & Duplicator plugin versions prior to 2.7 Description The FastDup plugin for WordPress has a path traversal issue affecting versions up to 2.7. Authenticated attackers with Contributor-level access or high...

6.5CVSS6.3AI score0.00046EPSS
Exploits0References7
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-56127

Malicious code in bioql PyPI...

7.5CVSS8.1AI score0.00693EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 5:0 a.m.6 views

CVE-2023-51406

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Ninja Team FastDup – Fastest WordPress Migration & Duplicator.This issue affects FastDup – Fastest WordPress Migration & Duplicator: from n/a through 2.1.7...

7.5CVSS7.8AI score0.00693EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 4:58 a.m.11 views

CVE-2023-6592

The FastDup WordPress plugin before 2.2 does not prevent directory listing in sensitive directories containing export files...

5.3CVSS6.7AI score0.04397EPSS
Exploits1
OSV
OSV
added 2024/01/16 4:15 p.m.2 views

CVE-2023-6592

The FastDup WordPress plugin before 2.2 does not prevent directory listing in sensitive directories containing export files...

5.3CVSS7.3AI score0.04397EPSS
Exploits1References2
Rows per page
Query Builder