CVE-2024-6210mediumCWE-200

CVE-2024-6210: falha de média gravidade em smub Duplicator – Backups & Migration Plugin…

Duplicator <= 1.5.9 - Full Path Disclosure

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.3epss 0.6%
The Duplicator plugin for WordPress is vulnerable to information exposure in all versions up to, and including, 1.5.9. This makes it possible for unauthenticated attackers to obtain the full path to instances, which they may be able to use in combination with other vulnerabilities or to simplify reconnaissance work. On its own, this information is of very limited use.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Produtos afetados
smub · Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More
CVEs relacionadas — smub Duplicator – Backups & Migration Plugin…

No mesmo produto, das mais perigosas para as menos.

CVE-2026-82814HIGHDuplicator <= 1.5.17 and Duplicator Pro <= 4.6.10 - Unauthenticated PHP Object InjectionEPSS 0.7%