CVE-2023-7232

Backup and Restore WordPress <= 1.45 - Unauthenticated Sensitive Data Exposure

The Backup and Restore WordPress WordPress plugin through 1.45 does not protect some log files containing sensitive information such as site configuration etc, allowing unauthenticated users to access such data

Affected

Backup and Restore WordPress

CVSS v3.1 CNA

5.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS

0.56% chance of exploitation in the next 30 days, 46th percentile

Published

2024-03-26

Updated

2024-08-02

Proof-of-concept exploits (1)

• https://wpscan.com/vulnerability/323fef8a-aa17-4698-9a02-c12d1d390763/

Security advisories

• https://wpscan.com/vulnerability/323fef8a-aa17-4698-9a02-c12d1d390763

References

• CVE Record
• NVD entry