{"vulnerability": "CVE-2022-2552", "sightings": [{"uuid": "3e58277c-6769-4474-b2a7-b980d82a0dce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-2552", "type": "exploited", "source": "https://www.exploit-db.com/exploits/50993", "content": "", "creation_timestamp": "2022-08-01T00:00:00.000000Z"}, {"uuid": "179d7f79-8d76-4405-9f6d-def3f16b089f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-2552", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2022/CVE-2022-2552.yaml", "content": "", "creation_timestamp": "2024-12-14T08:45:24.000000Z"}, {"uuid": "e7eb4b5f-67db-4fcb-b1bf-a539c88888f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-25523", "type": "seen", "source": "https://t.me/cibsecurity/39583", "content": "\u203c CVE-2022-25523 \u203c\n\nTypesetterCMS v5.1 was discovered to contain a Cross-Site Request Forgery (CSRF) which is exploited via a crafted POST request.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-25T23:31:02.000000Z"}, {"uuid": "79fc38f7-9c1d-4413-bcf9-bc6f4f9ff472", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-25521", "type": "seen", "source": "https://t.me/cibsecurity/39713", "content": "\u203c CVE-2022-25521 \u203c\n\nUNNO v03.11.00 was discovered to contain access control issue.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-29T07:40:57.000000Z"}, {"uuid": "30cab35d-daa6-4d47-b231-d61b3c432f60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-2552", "type": "seen", "source": "https://t.me/hacking_Attack/63906", "content": "Exploit Collector\nWordPress Duplicator 1.4.7 Information Disclosure\n\nhttps://1.bp.blogspot.com/-HlvbbOwsdTc/WWlvV_wSsQI/AAAAAAAAIOA/psrlTyexNtUDdre2JEY7YvqsGP1V8LJKQCLcBGAs/s1600/h47.png \nWordPress Duplicator plugin versions 1.4.7 and below suffer from an information disclosure vulnerability.\n\nSHA-256 | 38cd46e9b0883e90c68e55e1459081b405275c6a3e9b4953e7114d5f941826d0\n\nDownload\n# Exploit Title: WordPress Plugin Duplicator 1.4.7 - Information Disclosure\n# Google Dork: N/A\n# Date: 07.27.2022\n# Exploit Author: SecuriTrust\n# Vendor Homepage: https://snapcreek.com/\n# Software Link: https://wordpress.org/plugins/duplicator/\n# Version: &lt;=\n# Tested on: Linux, Windows\n# CVE : CVE-2022-2552\n# Reference: https://securitrust.fr\n# Reference: https://github.com/SecuriTrust/CVEsLab/CVE-2022-2552\n\n#Product:\nWordPress Plugin Duplicator &lt;=\n\n#Vulnerability:\n1-Some system information may be disclosure.\n\n#Proof-Of-Concept:\n1-System information.\nSome system information is obtained using the \"view\" parameter.\nhttp://[PATH]/backups-dup-lite/dup-installer/main.installer.php\n\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-01T20:01:32.634349Z"}, {"uuid": "409f84e4-3c43-41f7-9082-58f4ae02362b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-2552", "type": "seen", "source": "https://t.me/hacking_Attack/63906", "content": "Exploit Collector\nWordPress Duplicator 1.4.7 Information Disclosure\n\nhttps://1.bp.blogspot.com/-HlvbbOwsdTc/WWlvV_wSsQI/AAAAAAAAIOA/psrlTyexNtUDdre2JEY7YvqsGP1V8LJKQCLcBGAs/s1600/h47.png \nWordPress Duplicator plugin versions 1.4.7 and below suffer from an information disclosure vulnerability.\n\nSHA-256 | 38cd46e9b0883e90c68e55e1459081b405275c6a3e9b4953e7114d5f941826d0\n\nDownload\n# Exploit Title: WordPress Plugin Duplicator 1.4.7 - Information Disclosure\n# Google Dork: N/A\n# Date: 07.27.2022\n# Exploit Author: SecuriTrust\n# Vendor Homepage: https://snapcreek.com/\n# Software Link: https://wordpress.org/plugins/duplicator/\n# Version: &lt;=\n# Tested on: Linux, Windows\n# CVE : CVE-2022-2552\n# Reference: https://securitrust.fr\n# Reference: https://github.com/SecuriTrust/CVEsLab/CVE-2022-2552\n\n#Product:\nWordPress Plugin Duplicator &lt;=\n\n#Vulnerability:\n1-Some system information may be disclosure.\n\n#Proof-Of-Concept:\n1-System information.\nSome system information is obtained using the \"view\" parameter.\nhttp://[PATH]/backups-dup-lite/dup-installer/main.installer.php\n\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-02T01:01:42.985142Z"}]}