CVE-2024-6210

MEDIUM

Duplicator <= 1.5.9 - Full Path Disclosure

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2024-6210 has a selected CVSS score of 5.3 (medium).

Description

The Duplicator plugin for WordPress is vulnerable to information exposure in all versions up to, and including, 1.5.9. This makes it possible for unauthenticated attackers to obtain the full path to instances, which they may be able to use in combination with other vulnerabilities or to simplify reconnaissance work. On its own, this information is of very limited use.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableYes
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Jul 24, 2024 · Source: CVE List

Affected products and versions

2
ProductSourceVersion range

Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More

Browse smub / Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More

Default status: unaffected

CVE ListThrough 1.5.9affected

duplicator

Browse snapcreek / duplicator

Default status: unknown

CVE ListThrough 1.5.9affected

References

4