{"uuid": "30cab35d-daa6-4d47-b231-d61b3c432f60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-2552", "type": "seen", "source": "https://t.me/hacking_Attack/63906", "content": "Exploit Collector\nWordPress Duplicator 1.4.7 Information Disclosure\n\nhttps://1.bp.blogspot.com/-HlvbbOwsdTc/WWlvV_wSsQI/AAAAAAAAIOA/psrlTyexNtUDdre2JEY7YvqsGP1V8LJKQCLcBGAs/s1600/h47.png \nWordPress Duplicator plugin versions 1.4.7 and below suffer from an information disclosure vulnerability.\n\nSHA-256 | 38cd46e9b0883e90c68e55e1459081b405275c6a3e9b4953e7114d5f941826d0\n\nDownload\n# Exploit Title: WordPress Plugin Duplicator 1.4.7 - Information Disclosure\n# Google Dork: N/A\n# Date: 07.27.2022\n# Exploit Author: SecuriTrust\n# Vendor Homepage: https://snapcreek.com/\n# Software Link: https://wordpress.org/plugins/duplicator/\n# Version: <=\n# Tested on: Linux, Windows\n# CVE : CVE-2022-2552\n# Reference: https://securitrust.fr\n# Reference: https://github.com/SecuriTrust/CVEsLab/CVE-2022-2552\n\n#Product:\nWordPress Plugin Duplicator <=\n\n#Vulnerability:\n1-Some system information may be disclosure.\n\n#Proof-Of-Concept:\n1-System information.\nSome system information is obtained using the \"view\" parameter.\nhttp://[PATH]/backups-dup-lite/dup-installer/main.installer.php\n\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-01T20:01:32.634349Z"}