Description
The Backup and Restore WordPress WordPress plugin through 1.45 does not protect some log files containing sensitive information such as site configuration etc, allowing unauthenticated users to access such data
Published: 2024-03-26
Score: 5.3 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 10 Nov 2026 21:30:00 +0000

Type Values Removed Values Added
First Time appeared Wpbackitup wp Backitup
CPEs cpe:2.3:a:wpbackitup:wp_backitup:*:*:*:*:*:*:*:*
Vendors & Products Wpbackitup wp Backitup
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 07 May 2025 01:45:00 +0000

Type Values Removed Values Added
First Time appeared Wpbackitup
Wpbackitup backup And Restore Wordpress
Weaknesses NVD-CWE-noinfo
CPEs cpe:2.3:a:wpbackitup:backup_and_restore_wordpress:*:*:*:*:*:wordpress:*:*
Vendors & Products Wpbackitup
Wpbackitup backup And Restore Wordpress

Fri, 22 Nov 2024 12:00:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 5.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'}

Subscriptions

Wpbackitup Backup And Restore Wordpress Wp Backitup
cve-icon MITRE

Status: PUBLISHED

Assigner: WPScan

Published:

Updated: 2024-08-02T17:32:05.721Z

Reserved: 2024-01-12T15:11:32.941Z

Link: CVE-2023-7232

cve-icon Vulnrichment

Updated: 2024-08-02T08:57:35.189Z

cve-icon NVD

Status : Analyzed

Published: 2024-03-26T05:15:48.660

Modified: 2026-06-17T06:52:22.227

Link: CVE-2023-7232

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses