Log out
Get PRO

Latest

Information leakage vulnerability in Backup Migration 1.2.8

  • Severity: high-risk
  • Status: Fixed
  • Publication: May 10, 2023

The Backup Migration plugin for WordPress has a security vulnerability that can allow unauthenticated attackers to access sensitive information, such as the site administrator’s email address, the locations of site backups, and the backups themselves. This vulnerability affects all versions up to and including 1.2.8 of the plugin, and is caused by config and log files in the wp-content/backup-migration/ folder.

Detected in:

Backup Migration fixed vulnerable versions: >= * <= 1.2.8
Backup Migration Staging fixed vulnerable versions:
BackupBliss – Backup Migration Staging fixed vulnerable versions:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.