437 matches found
VulnCheck KEV: CVE-2020-11738
WordPress Snap Creek Duplicator plugin contains a file download vulnerability when an administrator creates a new copy of their site that allows an attacker to download the generated files from their Wordpress dashboard. This vulnerability affects Duplicator and Dulplicator Pro...
Duplicator Plugin for WordPress Installation File Detected
WordPress Duplicator Plugin files have been detected on the target WordPress installation. This may present an attacker with sensitive information to mount further attacks. No source data...
WordPress Duplicator < 1.3.28 Directory Traversal
Directory traversal vulnerability in WordPress Duplicator plugin Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...
Wordpress Plugin Duplicator Arbitrary File Read Vulnerability
WordPress is a blogging platform based on the PHP language, which can be used to set up a website on a server that supports PHP and MySQL databases, and can also be used as a content management system CMS. An arbitrary file read vulnerability exists in the Wordpress plugin Duplicator. An attacker...
WordPress Duplicator 1.3.26 Directory Traversal / File Read
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'WordPress Duplicator File Read Vulnerability', 'Description' = %q This module exploits an unauthenticated directory traversal vulnerability in...
Wordpress Duplicator 1.3.26 Plugin - Unauthenticated Arbitrary File Read Exploit
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'WordPress Duplicator File Read Vulnerability', 'Description' = %q This module exploits an unauthenticated directory traversal vulnerability in...
Wordpress Plugin Duplicator 1.3.26 - Unauthenticated Arbitrary File Read (Metasploit)
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'WordPress Duplicator File Read Vulnerability', 'Description' = %q This module exploits an unauthenticated directory traversal vulnerability in...
WordPress Plugin 'Duplicator' Directory Traversal (CVE-2020-11738)
Binary data wordpresspluginduplicatorcve-2020-11738.nbin...
WordPress Snap Creek Duplicator and Duplicator Pro Path Traversal Vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Snap Creek Duplicator is one of the WordPress site migration plugins used in it. A path traversal vulnerability exists in WordPress Sna...
CVE-2020-11738
The Snap Creek Duplicator plugin before 1.3.28 for WordPress and Duplicator Pro before 3.8.7.1 allows Directory Traversal via ../ in the file parameter to duplicatordownload or duplicatorinit...
CVE-2020-11738
The Snap Creek Duplicator plugin before 1.3.28 for WordPress and Duplicator Pro before 3.8.7.1 allows Directory Traversal via ../ in the file parameter to duplicatordownload or duplicatorinit...
Directory traversal
The Snap Creek Duplicator plugin before 1.3.28 for WordPress and Duplicator Pro before 3.8.7.1 allows Directory Traversal via ../ in the file parameter to duplicatordownload or duplicatorinit...
CVE-2020-11738
The Snap Creek Duplicator plugin before 1.3.28 for WordPress and Duplicator Pro before 3.8.7.1 allows Directory Traversal via ../ in the file parameter to duplicatordownload or duplicatorinit...
CVE-2020-11738
The Snap Creek Duplicator plugin before 1.3.28 for WordPress and Duplicator Pro before 3.8.7.1 allows Directory Traversal via ../ in the file parameter to duplicatordownload or duplicatorinit...
CVE-2020-11738
CVE-2020-11738 affects WordPress installations using the Snap Creek Duplicator plugin (pre-1.3.28) and Duplicator Pro (pre-3.8.7.1). The vulnerability is a directory traversal flaw triggered by a ../ in the file parameter to duplicator_download or duplicator_init, enabling unauthenticated access ...
CVE-2020-11738
The Snap Creek Duplicator plugin before 1.3.28 for WordPress and Duplicator Pro before 3.8.7.1 allows Directory Traversal via ../ in the file parameter to duplicatordownload or duplicatorinit. Recent assessments: kevthehermit at April 14, 2020 2:38pm UTC reported: This plugin is recorded as havin...
Popular ThemeREX WordPress Plugin Opens Websites to RCE
A critical vulnerability in a WordPress plugin known as “ThemeREX Addons” could open the door for remote code execution in tens of thousands of websites. According to Wordfence, the bug has been actively exploited in the wild as a zero-day. The plugin, which is installed on approximately 44,000...
WordPress Duplicator Plugin Arbitrary File Download
An arbitrary file download vulnerability exists in WordPress Duplicator plugin. Successful exploitation of this vulnerability would allow a remote attacker to download arbitrary files from the affected system...
Active Attacks Target Popular Duplicator WordPress Plugin
Active exploits are targeting a recently patched flaw in the popular WordPress plugin Duplicator, which has more than 1 million active installations. So far, researchers have seen 60,000 attempts to harvest sensitive information from victims. Researchers at Wordfence who discovered the in-the-wil...
WordPress Plugin 'Duplicator' < 1.3.28 Unauthenticated Arbitrary File Download
The WordPress application running on the remote host has a version of the 'Duplicator' plugin that is prior to 1.3.28 and, thus, is affected by an unauthenticated arbitrary file download vulnerability that can allow the attackers to download 'wp-config.php' and steal database credentials. C Tenab...