CVE-2022-2552

5.3 MEDIUM

Published: August 22, 2022 Modified: February 02, 2026

Description

The Duplicator WordPress plugin before 1.4.7 does not authenticate or authorize visitors before displaying information about the system such as server software, php version and full file system path to the site.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

CVSS v3.x Details

0.0 Low Medium High Critical 10.0

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

https://github.com/SecuriTrust/CVEsLab/tree/main/CVE-2022-2552

Source: contact@wpscan.com

Exploit Third Party Advisory

https://wpscan.com/vulnerability/6b540712-fda5-4be6-ae4b-bd30a9d9d698

Source: contact@wpscan.com

Exploit Third Party Advisory

https://github.com/SecuriTrust/CVEsLab/tree/main/CVE-2022-2552

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit Third Party Advisory

https://wpscan.com/vulnerability/6b540712-fda5-4be6-ae4b-bd30a9d9d698

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit Third Party Advisory

4 reference(s) from NVD

Quick Stats

CVSS v3 Score

5.3 / 10.0

EPSS (Exploit Probability)

51.1%

98th percentile

Exploitation Status

Not in CISA KEV

Weaknesses (CWE)

CWE-306 CWE-862

Affected Vendors

awesomemotive

Related CVEs