CVE-2014-9262: snapcreek duplicator
Modified
Published 07-08-2017Last modified 06-08-2024
Vulnerability summary
CVE-2014-9262 is a high (CVSS 8.2) vulnerability in snapcreek duplicator. EPSS estimates a 7.49% chance of exploitation in the next 30 days, higher than 94.4% of scored vulnerabilities. 1 public exploit is recorded. Fixed in 0.5.10.
CVSS score
8.2/10
010
High · v3.0 (NVD)EPSS score
7.49%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits1exploit-database
Timeline
- 07-08-2017PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
The Duplicator plugin in Wordpress before 0.5.10 allows remote authenticated users to create and download backup files.
CVSS metrics
3 scores · 2 sources · 3 versionsHigh 8.2Preferred score · wordfence (Source)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:NSourcesSingle source
High 8.2Preferred score · NVD (NIST)
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:NSourcesSingle source
Medium 5.5Preferred score · NVD (NIST)
AV:N/AC:L/Au:S/C:P/I:P/A:NSourcesSingle source
EPSS trend
Probability
7.49%
Chance of exploitation in the next 30 days
Percentile
94%
Versus all other CVEs
30-day change
No change 0.00 pp
From 7.49% on 22-09-2026
22-09-202622-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
1 foundWordPress Plugin Duplicator 0.5.8 - Privilege Escalation
Maturity: poc
Weaknesses
CWE · root cause- CWE-264Permissions, Privileges, and Access ControlsWeaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.
- CWE-287Improper AuthenticationWhen an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
Affected systems
Snapcreek1 product
- duplicator≤ 0.5.8
Wordpress1 product
- duplicator< 0.5.10
2 vendors · 2 products