WordPress FastDup <= 2.1.9 Sensitive Information Exposure - Directory Listing
CVE-2023-6592
Verified
Description
FastDup WordPress plugin < 2.2 contains a directory listing vulnerability caused by lack of access restrictions in sensitive directories, letting attackers view export files, exploit requires no authentication.
Severity
Medium
CVSS Score
5.3
Exploit Probability
1%
Published Date
April 9, 2026
Template Author
pussycat0x
CVE-2023-6592.yaml
5.3Score
CVSS Metrics
CVSS Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVE ID:
cve-2023-6592
CWE ID:
cwe-548
References
https://wpscan.com/vulnerability/a39bb807-b143-4863-88ff-1783e407d7d4/https://wordpress.org/plugins/fastdup/https://plugins.trac.wordpress.org/changeset/3012664https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/fastdup/fastdup-219-sensitive-information-exposure-via-directory-listing
Remediation Steps
Update to version 2.2 or later.