Skip to main content

Snapcreek

3 CVEs vendor

Monthly

CVE-2023-24398 Apr 07, 10:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Ezp Coming Soon Page Snapcreek
NVD
CVSS 3.1
4.8
EPSS
0.4%
CVE-2017-16815 Nov 14, 19:29 MEDIUM This Month

installer.php in the Snap Creek Duplicator (WordPress Site Migration & Backup) plugin before 1.2.30 for WordPress has XSS because the values "url_new". Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP WordPress XSS Duplicator Snapcreek
NVD
CVSS 3.0
6.1
EPSS
0.3%
CVE-2014-9262 Aug 07, 17:29 HIGH POC This Week

The Duplicator plugin in Wordpress before 0.5.10 allows remote authenticated users to create and download backup files. Rated high severity (CVSS 8.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

WordPress Privilege Escalation Duplicator Snapcreek
NVD Exploit-DB
CVSS 3.0
8.2
EPSS
7.4%
EPSS 0% CVSS 4.8
MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Ezp Coming Soon Page Snapcreek
NVD
EPSS 0% CVSS 6.1
MEDIUM This Month

installer.php in the Snap Creek Duplicator (WordPress Site Migration & Backup) plugin before 1.2.30 for WordPress has XSS because the values "url_new". Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP WordPress XSS +2
NVD
EPSS 7% CVSS 8.2
HIGH POC This Week

The Duplicator plugin in Wordpress before 0.5.10 allows remote authenticated users to create and download backup files. Rated high severity (CVSS 8.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

WordPress Privilege Escalation Duplicator +1
NVD Exploit-DB

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy