Vulnerability — CVE-2018-25095

CVE-2018-25095

Reference to the description:: https://nvd.nist.gov/vuln/detail/CVE-2018-25095
Description:: The Duplicator WordPress plugin before 1.3.0 does not properly escape values when its installer script replaces values in WordPress configuration files. If this installer script is left on the site after use, it could be use to run arbitrary code on the server.
Last updated date:: 01/11/2024

Type:: exploit
Confidence:: HIGH
Date of publishing:: 01/11/2024
Reference url to background: https://wpscan.com/vulnerability/16cc47aa-cb31-4114-b014-7ac5fbc1d3ee