cve/2022/CVE-2022-2552.md

CVE-2022-2552

Description

The Duplicator WordPress plugin before 1.4.7 does not authenticate or authorize visitors before displaying information about the system such as server software, php version and full file system path to the site.

POC

Reference

• https://github.com/SecuriTrust/CVEsLab/tree/main/CVE-2022-2552
• https://wpscan.com/vulnerability/6b540712-fda5-4be6-ae4b-bd30a9d9d698

Github

• https://github.com/ARPSyndicate/cvemon