module

WordPress Duplicator File Read Vulnerability

Disclosed
Feb 19, 2020

Description

This module exploits an unauthenticated directory traversal vulnerability in WordPress plugin
'Duplicator' version 1.3.24-1.3.26, allowing arbitrary file read with the web server privileges.
This vulnerability was being actively exploited when it was discovered.
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.