Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2023-6113

WP Staging (Free < 3.1.3, Pro < 5.1.3) - Unauthenticated Backup Download

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The WP STAGING WordPress Backup Plugin before 3.1.3 and WP STAGING Pro WordPress Backup Plugin before 5.1.3 do not prevent visitors from leaking key information about ongoing backups processes, allowing unauthenticated attackers to download said backups later.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown WP STAGING WordPress Backup Plugin

Default version status: unaffected

  • 0 to < 3.1.3affected

Unknown WP STAGING Pro WordPress Backup Plugin

Default version status: unaffected

  • 0 to < 5.1.3affected

References