The WordPress Database Backup plugin before version 5.5 stores downloaded backups in a folder on the website. This makes it possible for attackers to guess the location of the backups and access them without permission. Attackers can guess the location of the backups by figuring out random numbers
This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!
Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:
> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21
Is this information incorrect? Please leave us a message.
