CVE-2022-2552
Assigner: WPScan
Published: 2022-08-22T15:04:02
State: PUBLISHED
title: Duplicator < 1.4.7.1 - Unauthenticated System Information Disclosure
problemTypes: descriptions: description: CWE-862 Missing Authorization
type: CWE
descriptions: description: CWE-306 Missing Authentication for Critical Function
type: CWE
affected: vendor: Unknown
product: Duplicator
versions: status: affected
versionType: custom
version: 0
lessThan: 1.4.7
defaultStatus: unaffected
collectionURL: https://wordpress.org/plugins
descriptions: value: The Duplicator WordPress plugin before 1.4.7 does not authenticate or authorize visitors before displaying information about the system such as server software, php version and full file system path to the site.
credits: value: Ihsan Sencan
type: finder
value: WPScan
type: coordinator
source: discovery: EXTERNAL
x_generator: engine: WPScan CVE Generator