VULNERABILITY INTELLIGENCE

CVE-2022-2552

CVSS score5.3 MEDIUM
EPSS probability12.03%
CISA KEVNot currently listed
Published2022-08-22
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Description

The Duplicator WordPress plugin before 1.4.7 does not authenticate or authorize visitors before displaying information about the system such as server software, php version and full file system path to the site.

Weakness classification

  • nvd@nist.gov: CWE-306

Primary references