Skip to main content

Duplicator CVE-2014-9262

HIGH
Permissions, Privileges, and Access Controls (CWE-264)
2017-08-07 cve@mitre.org
WordPress Privilege Escalation Duplicator
8.2
CVSS 3.0 · NVD
Share

Severity by source

NVD PRIMARY
8.2 HIGH
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
Low
Availability
None

Lifecycle Timeline

1
CVE Published
Aug 07, 2017 - 17:29 cve.org
HIGH 8.2

DescriptionCVE.org

The Duplicator plugin in Wordpress before 0.5.10 allows remote authenticated users to create and download backup files.

AnalysisAI

The Duplicator plugin in Wordpress before 0.5.10 allows remote authenticated users to create and download backup files. Rated high severity (CVSS 8.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-264. The Duplicator plugin in Wordpress before 0.5.10 allows remote authenticated users to create and download backup files. Affected products include: Snapcreek Duplicator. Version information: before 0.5.10.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Duplicator

View all
CVE-2018-17207 CRITICAL POC
9.8 Sep 19

An issue was discovered in Snap Creek Duplicator before 1.2.42. Rated critical severity (CVSS 9.8), this vulnerability i
CVE-2018-25095 CRITICAL POC
9.8 Jan 08

The Duplicator WordPress plugin before 1.3.0 does not properly escape values when its installer script replaces values i
CVE-2023-6114 HIGH POC
7.5 Dec 26

The Duplicator WordPress plugin before 1.5.7.1, Duplicator Pro WordPress plugin before 4.5.14.2 does not disallow listin
CVE-2022-2551 HIGH POC
7.5 Aug 22

The Duplicator WordPress plugin before 1.4.7 discloses the url of the a backup to unauthenticated visitors accessing the
CVE-2020-11738 HIGH POC
7.5 Apr 13

The Snap Creek Duplicator plugin before 1.3.28 for WordPress (and Duplicator Pro before 3.8.7.1) allows Directory Traver
CVE-2018-7543 MEDIUM POC
6.1 Mar 26

Cross-site scripting (XSS) vulnerability in installer/build/view.step4.php of the SnapCreek Duplicator plugin 1.2.32 for
CVE-2013-4625 MEDIUM POC
4.3 Aug 09

Cross-site scripting (XSS) vulnerability in files/installer.cleanup.php in the Duplicator plugin before 0.4.5 for WordPr
CVE-2022-2552 MEDIUM POC
5.3 Aug 22

The Duplicator WordPress plugin before 1.4.7 does not authenticate or authorize visitors before displaying information a
CVE-2017-16815 MEDIUM
6.1 Nov 14

installer.php in the Snap Creek Duplicator (WordPress Site Migration & Backup) plugin before 1.2.30 for WordPress has XS
CVE-2023-33309 MEDIUM
6.1 May 28

Unauth. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low at

Same weakness CWE-264 – Permissions, Privileges, and Access Controls

View all
CVE-2013-0422 CRITICAL POC
9.8
CVE-2016-10372 CRITICAL POC
9.8
CVE-2014-9583 CRITICAL POC
10.0
CVE-2012-0297 CRITICAL POC
10.0
CVE-2015-7709 CRITICAL POC
10.0
CVE-2014-0514 CRITICAL POC
9.3
CVE-2013-6955 CRITICAL POC
10.0
CVE-2012-0299 CRITICAL POC
10.0

Same technique Privilege Escalation

View all
CVE-2025-47812 CRITICAL POC
10.0
CVE-2013-0422 CRITICAL POC
9.8
CVE-2013-0632 CRITICAL POC
9.8
CVE-2017-5689 CRITICAL POC
9.8
CVE-2017-12635 CRITICAL POC
9.8
CVE-2016-10372 CRITICAL POC
9.8
CVE-2014-9583 CRITICAL POC
10.0
CVE-2012-0297 CRITICAL POC
10.0

Share

CVE-2014-9262 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy