CVE-2023-33309

Mô tả

Tham khảo

• patchstack.com/database/vulnerability/duplicator-pro/wordpress-duplicator-pro-plugin-4-5-11-reflected-cross-site-scripting-xss-vulnerability · Third Party Advisory

Lỗ hổng khác của duplicator

• CVE-2018-25095NGHIÊM TRỌNG 9.8The Duplicator WordPress plugin before 1.3.0 does not properly escape values when its installer script replaces values in WordPress configur…
• CVE-2023-6114CAO 7.5The Duplicator WordPress plugin before 1.5.7.1, Duplicator Pro WordPress plugin before 4.5.14.2 does not disallow listing the `backups-dup-l…
• CVE-2022-2552TRUNG BÌNH 5.3The Duplicator WordPress plugin before 1.4.7 does not authenticate or authorize visitors before displaying information about the system such…
• CVE-2022-2551CAO 7.5The Duplicator WordPress plugin before 1.4.7 discloses the url of the a backup to unauthenticated visitors accessing the main installer endp…
• CVE-2020-11738CAO 7.5ĐANG BỊ KHAI THÁC (CISA KEV)The Snap Creek Duplicator plugin before 1.3.28 for WordPress (and Duplicator Pro before 3.8.7.1) allows Directory Traversal via ../ in the f…