CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.8. It affects WordPress.
CVE
CVE-2018-25095
Severity
CRITICAL
CVSS
9.8
EPSS
0.92%
WordPress
Original NVD Description
The Duplicator WordPress plugin before 1.3.0 does not properly escape values when its installer script replaces values in WordPress configuration files. If this installer script is left on the site after use, it could be use to run arbitrary code on the server.
Related CVEs
Other vulnerabilities affecting the same vendor(s)