Vulnerabilities

TI-2017-12368 CVE-2017-16815 · GHSA-6477-hffq-3v4j

installer.php in the Snap Creek Duplicator (WordPress Site Migration & Backup) plugin…

LOW 29

installer.php in the Snap Creek Duplicator (WordPress Site Migration & Backup) plugin before 1.2.30 for WordPress has XSS because the values "url_new" (/wp-content/plugins/duplicator/installer/build/view.step4.php) and "…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01017 Published 2017-11-14 No fix listed CWE-79

TI-2014-07517 CVE-2014-9262 · GHSA-gmmj-vmxc-fp9j

The Duplicator plugin in Wordpress before 0.5.10 allows remote authenticated users to create and download backup files.

MEDIUM 46

The Duplicator plugin in Wordpress before 0.5.10 allows remote authenticated users to create and download backup files.

CVSS 3.0HIGH 8.2 Network No auth No interaction EPSS 0.07486 Published 2017-08-07 No fix listed CWE-264

Vulnerabilities

Filters

installer.php in the Snap Creek Duplicator (WordPress Site Migration & Backup) plugin…

The Duplicator plugin in Wordpress before 0.5.10 allows remote authenticated users to create and download backup files.