CVE-2024-6210mediumCWE-200

CVE-2024-6210: fallo de gravedad media en smub Duplicator – Backups & Migration Plugin…

Duplicator <= 1.5.9 - Full Path Disclosure

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 5.3epss 0.6%
The Duplicator plugin for WordPress is vulnerable to information exposure in all versions up to, and including, 1.5.9. This makes it possible for unauthenticated attackers to obtain the full path to instances, which they may be able to use in combination with other vulnerabilities or to simplify reconnaissance work. On its own, this information is of very limited use.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Productos afectados
smub · Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More
CVEs relacionadas — smub Duplicator – Backups & Migration Plugin…

En el mismo producto, de las más peligrosas a las menos.

CVE-2026-82814HIGHDuplicator <= 1.5.17 and Duplicator Pro <= 4.6.10 - Unauthenticated PHP Object InjectionEPSS 0.7%