CVE-2022-2552

Duplicator < 1.4.7.1 - Unauthenticated System Information Disclosure

published August 22, 2022

CVSS
—
EPSS
12%
Percentile
96.1
In the wild
Unconfirmed
What it is

The Duplicator WordPress plugin before 1.4.7 does not authenticate or authorize visitors before displaying information about the system such as server software, php version and full file system path to the site.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.12028 · 96.1th percentile
Published
2022-08-22T15:04Z
EPSS history
Timeline
  • 22 AUG 15:04Z
    Duplicator < 1.4.7.1 - Unauthenticated System Information Disclosure
    cvelistv5