CVE-2023-6592 - FastDup – Fastest WordPress Migration & Duplicator < 2.2 - Directory Listing to Account Takeover and Sensitive Data Exposure

MEDIUM

FastDup – Fastest WordPress Migration & Duplicator < 2.2 - Directory Listing to Account Takeover and Sensitive Data Exposure

Published Jan 16, 2024

5.3

MEDIUM

CVSS 3.1

EPSS 0.91%

The FastDup WordPress plugin before 2.2 does not prevent directory listing in sensitive directories containing export files.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

FastDup

unaffected

Version	Status	Constraints
0	affected	<2.2

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-58816		Advisory
https://research.cleantalk.org/cve-2023-6592-fastdup-database-users-password-leak-poc-exploit/
https://wpscan.com/vulnerability/a39bb807-b143-4863-88ff-1783e407d7d4/		exploitvdb-entrytechnical-descriptionThird Party Advisory