CVE-2023-6592

FastDup – Fastest WordPress Migration & Duplicator < 2.2 - Directory Listing to Account Takeover and Sensitive Data Exposure

The FastDup WordPress plugin before 2.2 does not prevent directory listing in sensitive directories containing export files.

Affected

FastDup

CVSS v3.1 NVD

5.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS

0.91% chance of exploitation in the next 30 days, 59th percentile

Nuclei

medium · CWE-548

Published

2024-01-16

Updated

2025-06-20

Proof-of-concept exploits (2)

• https://research.cleantalk.org/cve-2023-6592-fastdup-database-users-password-leak-poc-exp…
• https://wpscan.com/vulnerability/a39bb807-b143-4863-88ff-1783e407d7d4/

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6592.yaml

Security advisories

• https://wpscan.com/vulnerability/a39bb807-b143-4863-88ff-1783e407d7d4

References

• CVE Record
• NVD entry