Lucene search

Duplicator 1.3.24 & 1.3.26 - Unauthenticated Arbitrary File Download

🗓️ 19 Feb 2020 00:00:00Reported by wpvulndbType

Duplicator 1.3.24 & 1.3.26 Unauthenticated File Downloa

Reporter	Title	Published	Views	Family All 23
Dsquare	WordPress Duplicator < 1.3.28 Directory Traversal	8 Mar 202100:00	–	dsquare
Tenable Nessus	WordPress Plugin 'Duplicator' Directory Traversal (CVE-2020-11738)	2 Sep 202000:00	–	nessus
Tenable Nessus	WordPress Plugin 'Duplicator' < 1.3.28 Unauthenticated Arbitrary File Download	21 Feb 202000:00	–	nessus
Prion	Directory traversal	13 Apr 202022:15	–	prion
wpexploit	Duplicator 1.3.24 & 1.3.26 - Unauthenticated Arbitrary File Download	19 Feb 202000:00	–	wpexploit
0day.today	Wordpress Duplicator 1.3.26 Plugin - Unauthenticated Arbitrary File Read Exploit	18 Dec 202000:00	–	zdt
0day.today	Wordpress Duplicator 1.3.26 Plugin - Unauthenticated Arbitrary File Read Exploit	18 Oct 202100:00	–	zdt
AttackerKB	CVE-2020-11738	13 Apr 202000:00	–	attackerkb
Hacker One	Mail.ru: "blog.skillfactory.ru" Vulnerable to Directory Traversal	28 Oct 202015:57	–	hackerone
Metasploit	WordPress Duplicator File Read Vulnerability	11 Dec 202004:37	–	metasploit

Vulners

Node

-duplicatorRange<1.3.28

-duplicator-proRange<3.8.7.1

Source	Link
wordfence	www.wordfence.com/blog/2020/02/active-attack-on-recently-patched-duplicator-plugin-vulnerability-affects-over-1-million-sites/
snapcreek	www.snapcreek.com/duplicator/docs/changelog/
snapcreek	www.snapcreek.com/duplicator/docs/changelog/
cxsecurity	www.cxsecurity.com/issue/WLB-2021010001
vulners	www.vulners.com/exploitdb/EDB-ID:49288

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

19 Feb 2020 00:00Current

3.3Low risk

Vulners AI Score3.3

EPSS0.972