CVE-2022-2552

MEDIUM NUCLEI

Duplicator < 1.4.7.1 - Information Disclosure

Title source: nuclei

Description

The Duplicator WordPress plugin before 1.4.7 does not authenticate or authorize visitors before displaying information about the system such as server software, php version and full file system path to the site.

Exploits (1)

exploitdb WORKING POC VERIFIED
by SecuriTrust · textwebappsphp
https://www.exploit-db.com/exploits/50993

Nuclei Templates (1)

Duplicator < 1.4.7.1 - Information Disclosure
MEDIUMVERIFIEDby iamnoooob,ritikchaddha
FOFA: body="/wp-content/plugins/duplicator"

References (2)

Scores

CVSS v3 5.3
EPSS 0.5111
EPSS Percentile 97.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Details

CWE
CWE-862 CWE-306
Status published
Products (1)
awesomemotive/duplicator < 1.4.7.1
Published Aug 22, 2022
Tracked Since Feb 18, 2026