CVE-2023-33309

Description

References

• patchstack.com/database/vulnerability/duplicator-pro/wordpress-duplicator-pro-plugin-4-5-11-reflected-cross-site-scripting-xss-vulnerability · Third Party Advisory

duplicator의 다른 취약점

• CVE-2018-25095심각 9.8The Duplicator WordPress plugin before 1.3.0 does not properly escape values when its installer script replaces values in WordPress configur…
• CVE-2023-6114높음 7.5The Duplicator WordPress plugin before 1.5.7.1, Duplicator Pro WordPress plugin before 4.5.14.2 does not disallow listing the `backups-dup-l…
• CVE-2022-2552보통 5.3The Duplicator WordPress plugin before 1.4.7 does not authenticate or authorize visitors before displaying information about the system such…
• CVE-2022-2551높음 7.5The Duplicator WordPress plugin before 1.4.7 discloses the url of the a backup to unauthenticated visitors accessing the main installer endp…
• CVE-2020-11738높음 7.5EXPLOITED (CISA KEV)The Snap Creek Duplicator plugin before 1.3.28 for WordPress (and Duplicator Pro before 3.8.7.1) allows Directory Traversal via ../ in the f…