Vulnerabilities > CVE-2018-25095 - Unspecified vulnerability in Snapcreek Duplicator

CVSS 9.8 - CRITICAL

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

snapcreek

critical

NVD

Published: 2024-01-08

Updated: 2024-01-11

Summary

The Duplicator WordPress plugin before 1.3.0 does not properly escape values when its installer script replaces values in WordPress configuration files. If this installer script is left on the site after use, it could be use to run arbitrary code on the server.

Vulnerable Configurations

Part	Description	Count
Application	Snapcreek Snapcreek Duplicator 0.1.0 Snapcreek Duplicator 0.2.0 Snapcreek Duplicator 0.2.1 Snapcreek Duplicator 0.2.2 Snapcreek Duplicator 0.2.3 Snapcreek Duplicator 0.2.4 Snapcreek Duplicator 0.2.5 Snapcreek Duplicator 0.2.6 Snapcreek Duplicator 0.2.7 Snapcreek Duplicator 0.2.8 Snapcreek Duplicator 0.2.9 Snapcreek Duplicator 0.3.0 Snapcreek Duplicator 0.3.1 Snapcreek Duplicator 0.3.2 Snapcreek Duplicator 0.4.0 Snapcreek Duplicator 0.4.1 Snapcreek Duplicator 0.4.2 Snapcreek Duplicator 0.4.3 Snapcreek Duplicator 0.4.4 Snapcreek Duplicator 0.4.5 Snapcreek Duplicator 0.4.6 Snapcreek Duplicator 0.5.0 Snapcreek Duplicator 0.5.1 Snapcreek Duplicator 0.5.2 Snapcreek Duplicator 0.5.4 Snapcreek Duplicator 0.5.6 Snapcreek Duplicator 0.5.8 Snapcreek Duplicator 0.5.10 Snapcreek Duplicator 0.5.12 Snapcreek Duplicator 0.5.14 Snapcreek Duplicator 0.5.16 Snapcreek Duplicator 0.5.18 Snapcreek Duplicator 0.5.20 Snapcreek Duplicator 0.5.22 Snapcreek Duplicator 0.5.24 Snapcreek Duplicator 0.5.26 Snapcreek Duplicator 0.5.28 Snapcreek Duplicator 0.5.30 Snapcreek Duplicator 0.5.32 Snapcreek Duplicator 0.5.34 Snapcreek Duplicator 1.1.0 Snapcreek Duplicator 1.1.2 Snapcreek Duplicator 1.1.4 Snapcreek Duplicator 1.1.6 Snapcreek Duplicator 1.1.8 Snapcreek Duplicator 1.1.10 Snapcreek Duplicator 1.1.12 Snapcreek Duplicator 1.1.14 Snapcreek Duplicator 1.1.16 Snapcreek Duplicator 1.1.18 Snapcreek Duplicator 1.1.20 Snapcreek Duplicator 1.1.22 Snapcreek Duplicator 1.1.24 Snapcreek Duplicator 1.1.26 Snapcreek Duplicator 1.1.28 Snapcreek Duplicator 1.1.30 Snapcreek Duplicator 1.1.32 Snapcreek Duplicator 1.1.34 Snapcreek Duplicator 1.2.0 Snapcreek Duplicator 1.2.4 Snapcreek Duplicator 1.2.6 Snapcreek Duplicator 1.2.8 Snapcreek Duplicator 1.2.10 Snapcreek Duplicator 1.2.12 Snapcreek Duplicator 1.2.14 Snapcreek Duplicator 1.2.16 Snapcreek Duplicator 1.2.18 Snapcreek Duplicator 1.2.20 Snapcreek Duplicator 1.2.22 Snapcreek Duplicator 1.2.24 Snapcreek Duplicator 1.2.26 Snapcreek Duplicator 1.2.30 Snapcreek Duplicator 1.2.32 Snapcreek Duplicator 1.2.34 Snapcreek Duplicator 1.2.36 Snapcreek Duplicator 1.2.38 Snapcreek Duplicator 1.2.40 Snapcreek Duplicator 1.2.42 Snapcreek Duplicator 1.2.44 Snapcreek Duplicator 1.2.46 Snapcreek Duplicator 1.2.48 Snapcreek Duplicator 1.2.50 Snapcreek Duplicator 1.2.52 Snapcreek Duplicator 1.3	84

References

https://wpscan.com/vulnerability/16cc47aa-cb31-4114-b014-7ac5fbc1d3ee