CVE-2022-2552: Duplicator < 1.4.7.1 - Unauthenticated System Information Disclosure
The Duplicator WordPress plugin before 1.4.7 does not authenticate or authorize visitors before displaying information about the system such as server software, php version and full file system path to the site.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-2552?
CVE-2022-2552 is a vulnerability in the Duplicator WordPress plugin before version 1.4.7.1 that allows unauthorized visitors to view sensitive system information.
How severe is CVE-2022-2552?
CVE-2022-2552 has a severity score of 5.3, which is considered medium.
How does CVE-2022-2552 affect the Duplicator WordPress plugin?
CVE-2022-2552 affects the Duplicator WordPress plugin before version 1.4.7.1, allowing unauthorized visitors to view system information.
Is there a fix for CVE-2022-2552?
Yes, upgrading the Duplicator WordPress plugin to version 1.4.7.1 or later resolves the CVE-2022-2552 vulnerability.
What can unauthorized visitors see due to CVE-2022-2552?
Unauthorized visitors can see sensitive system information such as server software, PHP version, and the full file system path to the site.