CVE-2023-6113

WP Staging (Free < 3.1.3, Pro < 5.1.3) - Unauthenticated Backup Download

High · published January 1, 2024

CVSS v3.1
7.5
EPSS
1%
Percentile
55.6
In the wild
Unconfirmed
What it is

The WP STAGING WordPress Backup Plugin before 3.1.3 and WP STAGING Pro WordPress Backup Plugin before 5.1.3 do not prevent visitors from leaking key information about ongoing backups processes, allowing unauthenticated attackers to download said backups later.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00782 · 55.6th percentile
Published
2024-01-01T14:18Z
EPSS history
Timeline
  • 01 JAN 14:18Z
    WP Staging (Free < 3.1.3, Pro < 5.1.3) - Unauthenticated Backup Download
    cvelistv5