Lucene search
K

17 matches found

CVE
CVE
added 2 days ago11 views

CVE-2026-52703

The CVE-2026-52703 entry concerns WordPress plugin FastDup (versions ≤ 2.7.2) with an unauthenticated path traversal vulnerability. The issue arises in the FastDup code path that allows traversal of the file system without authentication, enabling access to restricted files. Connected sources con...

9.6CVSS5.2AI score0.0035EPSS
Exploits0References1
Cvelist
Cvelist
added 2 days ago24 views

CVE-2026-52703 WordPress FastDup plugin <= 2.7.2 - Path Traversal vulnerability

Unauthenticated Path Traversal in FastDup = 2.7.2 versions...

9.6CVSS0.0035EPSS
Exploits0References1
Patchstack
Patchstack
added 5 days ago5 views

WordPress FastDup plugin <= 2.7.2 - Path Traversal vulnerability

Path Traversal vulnerability discovered by R2D2 in WordPress Plugin FastDup versions = 2.7.2...

9.6CVSS5.3AI score0.0035EPSS
Exploits0Affected Software1
NVD
NVD
added 2026/02/12 3:16 p.m.2 views

CVE-2026-1104

The FastDup – Fastest WordPress Migration & Duplicator plugin for WordPress is vulnerable to unauthorized backup creation and download due to a missing capability check on REST API endpoints in all versions up to, and including, 2.7.1. This makes it possible for authenticated attackers, with...

8.8CVSS0.00266EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/02/12 2:25 p.m.26 views

CVE-2026-1104 FastDup – Fastest WordPress Migration & Duplicator <= 2.7.1 - Missing Authorization to Authenticated (Contributor+) Backup Creation and Download

The FastDup – Fastest WordPress Migration & Duplicator plugin for WordPress is vulnerable to unauthorized backup creation and download due to a missing capability check on REST API endpoints in all versions up to, and including, 2.7.1. This makes it possible for authenticated attackers, with...

8.8CVSS0.00266EPSS
Exploits0References3
CVE
CVE
added 2026/02/12 2:25 p.m.12 views

CVE-2026-1104

CVE-2026-1104 affects the FastDup – Fastest WordPress Migration & Duplicator plugin for WordPress. The vulnerability is due to a missing capability check on REST API endpoints across all versions up to and including 2.7.1, enabling authenticated attackers with Contributor-level access and above t...

8.8CVSS5.5AI score0.00266EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2026/02/12 2:25 p.m.2 views

CVE-2026-1104

The FastDup – Fastest WordPress Migration & Duplicator plugin for WordPress is vulnerable to unauthorized backup creation and download due to a missing capability check on REST API endpoints in all versions up to, and including, 2.7.1. This makes it possible for authenticated attackers, with...

8.8CVSS5.5AI score0.00266EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2026/02/12 12:0 a.m.3 views

PT-2026-7851

The FastDup – Fastest WordPress Migration & Duplicator plugin for WordPress is vulnerable to unauthorized backup creation and download due to a missing capability check on REST API endpoints in all versions up to, and including, 2.7.1. This makes it possible for authenticated attackers, with...

8.8CVSS5.5AI score0.00266EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2026/01/07 9:15 a.m.2 views

CVE-2026-0604

The FastDup – Fastest WordPress Migration & Duplicator plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 2.7 via the 'dirpath' parameter in the 'njt-fastdup/v1/template/directory-tree' REST API endpoint. This makes it possible for authenticated attackers,...

6.5CVSS5.9AI score0.00318EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/01/06 12:0 a.m.2 views

WordPress plugin FastDup 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A path travers...

6.5CVSS6.5AI score0.00318EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/05/23 4:58 a.m.12 views

CVE-2023-6592

The FastDup WordPress plugin before 2.2 does not prevent directory listing in sensitive directories containing export files...

5.3CVSS6.7AI score0.00913EPSS
Exploits1
OSV
OSV
added 2024/01/16 4:15 p.m.2 views

CVE-2023-6592

The FastDup WordPress plugin before 2.2 does not prevent directory listing in sensitive directories containing export files...

5.3CVSS7.3AI score0.00913EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2024/01/16 3:57 p.m.5 views

CVE-2023-6592 FastDup – Fastest WordPress Migration & Duplicator < 2.2 - Directory Listing to Account Takeover and Sensitive Data Exposure

The FastDup WordPress plugin before 2.2 does not prevent directory listing in sensitive directories containing export files...

5.5AI score0.00913EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2024/01/16 12:0 a.m.7 views

PT-2024-15017

Name of the Vulnerable Software and Affected Versions FastDup WordPress plugin versions prior to 2.2 Description The issue concerns the FastDup WordPress plugin, which does not prevent directory listing in sensitive directories containing export files. This could potentially expose sensitive...

5.3CVSS6.7AI score0.00913EPSS
Exploits1References9
OSV
OSV
added 2024/01/08 9:15 p.m.1 views

CVE-2023-51406

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Ninja Team FastDup – Fastest WordPress Migration & Duplicator.This issue affects FastDup – Fastest WordPress Migration & Duplicator: from n/a through 2.1.7...

7.5CVSS7.2AI score0.0048EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/01/08 8:41 p.m.3 views

CVE-2023-51406 WordPress FastDup Plugin <= 2.1.7 is vulnerable to Sensitive Data Exposure

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Ninja Team FastDup – Fastest WordPress Migration & Duplicator.This issue affects FastDup – Fastest WordPress Migration & Duplicator: from n/a through 2.1.7...

5.3CVSS6.2AI score0.0048EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/01/08 8:41 p.m.17 views

CVE-2023-51406 WordPress FastDup Plugin <= 2.1.7 is vulnerable to Sensitive Data Exposure

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Ninja Team FastDup – Fastest WordPress Migration & Duplicator.This issue affects FastDup – Fastest WordPress Migration & Duplicator: from n/a through 2.1.7...

5.3CVSS7.7AI score0.0048EPSS
Exploits0References1
Rows per page
Query Builder