← Back to CVE List

CVE-2018-25095

Published: 2024-01-08T19:15Z
Last Modified: 2024-11-21T04:03Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
The Duplicator WordPress plugin before 1.3.0 does not properly escape values when its installer script replaces values in WordPress configuration files. If this installer script is left on the site after use, it could be use to run arbitrary code on the server. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt