The BackWPup WordPress plugin before 4.0.4 does not prevent Directory Listing in its temporary backup folder, allowing unauthenticated attackers to download backups of a site's database.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://wpscan.com/vulnerability/79b07f37-2c6b-4846-bb28-91a1e5bf112e/ | Exploit Third Party Advisory |
| https://wpscan.com/vulnerability/79b07f37-2c6b-4846-bb28-91a1e5bf112e/ | Exploit Third Party Advisory |
Configurations
History
11 Apr 2025, 12:53
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | NVD-CWE-noinfo | |
| First Time |
Inpsyde backwpup
Inpsyde |
|
| References | () https://wpscan.com/vulnerability/79b07f37-2c6b-4846-bb28-91a1e5bf112e/ - Exploit, Third Party Advisory | |
| CPE | cpe:2.3:a:inpsyde:backwpup:*:*:*:*:*:wordpress:*:* |
30 Aug 2024, 10:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | The BackWPup WordPress plugin before 4.0.4 does not prevent Directory Listing in its temporary backup folder, allowing unauthenticated attackers to download backups of a site's database. |
08 Apr 2024, 18:48
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-04-08 18:15
Updated : 2025-04-11 12:53
NVD link : CVE-2023-7164
Mitre link : CVE-2023-7164
JSON object : View
Products Affected
inpsyde
- backwpup
CWE