CVE-2023-6113

WP Staging (Free < 3.1.3, Pro < 5.1.3) - Unauthenticated Backup Download

The WP STAGING WordPress Backup Plugin before 3.1.3 and WP STAGING Pro WordPress Backup Plugin before 5.1.3 do not prevent visitors from leaking key information about ongoing backups processes, allowing unauthenticated attackers to download said backups later.

Affected

WP STAGING WordPress Backup Plugin · WP STAGING Pro WordPress Backup Plugin

CVSS v3.1 NVD

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.78% chance of exploitation in the next 30 days, 55th percentile

Published

2024-01-01

Updated

2025-06-18

Proof-of-concept exploits (2)

• https://research.cleantalk.org/cve-2023-6113-wp-staging-unauth-sensitive-data-exposure-to…
• https://wpscan.com/vulnerability/5a71049a-09a6-40ab-a4e8-44634869d4fb

Security advisories

• https://research.cleantalk.org/cve-2023-6113-wp-staging-unauth-sensitive-data-exposure-to…

References

• CVE Record
• NVD entry