Beveiligingsadvies

CVE-2022-2551

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-08-22 15:03:52

Laatst bijgewerkt 2024-08-03 00:39:08

Toegewezen door WPScan

CVSS-score geen score

Status PUBLISHED

Beschrijving

The Duplicator WordPress plugin before 1.4.7 discloses the url of the a backup to unauthenticated visitors accessing the main installer endpoint of the plugin, if the installer script has been run once by an administrator, allowing download of the full site backup without authenticating.

← Alle CVE's bekijken Bekijk op cve.org ↗