Test ID:	1.3.6.1.4.1.25623.1.0.141688
Category:	Web application abuses
Title:	WordPress Duplicator Plugin < 1.2.42 RCE Vulnerability
Summary:	An issue was discovered in Snap Creek Duplicator. By accessing leftover;installer files (installer.php and installer-backup.php), an attacker can inject PHP code into wp-config.php;during the database setup step, achieving arbitrary code execution.
Description:	Summary: An issue was discovered in Snap Creek Duplicator. By accessing leftover installer files (installer.php and installer-backup.php), an attacker can inject PHP code into wp-config.php during the database setup step, achieving arbitrary code execution. Affected Software/OS: Snap Creek Duplicator plugin prior to version 1.2.42. Solution: Update to version 1.2.42 or later and remove the leftover files. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2018-17207 https://snapcreek.com/duplicator/docs/changelog/?lite https://www.synacktiv.com/ressources/advisories/WordPress_Duplicator-1.2.40-RCE.pdf
Copyright	Copyright (C) 2018 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.