Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2024-7315

Migration, Backup, Staging – WPvivid < 0.9.106 - Unauthenticated Sensitive Data Exposure

Description

The Migration, Backup, Staging WordPress plugin before 0.9.106 does not use sufficient randomness in the filename that is created when generating a backup, which could be bruteforced by attackers to leak sensitive information about said backups.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Migration, Backup, Staging

Default version status: unaffected

  • 0.9.103 to < 0.9.106affected

References