CVE-2024-7315

Description

The Migration, Backup, Staging WordPress plugin before 0.9.106 does not use sufficient randomness in the filename that is created when generating a backup, which could be bruteforced by attackers to leak sensitive information about said backups.

Reserved 2024-07-30 | Published 2024-10-02 | Updated 2024-10-02 | Assigner WPScan

Problem types

CWE-200 Information Exposure

Product status

Default status
unaffected

0.9.103 before 0.9.106
affected

Credits

Dmitrii Ignatyev finder

WPScan coordinator

References

wpscan.com/...rability/456b728b-a451-4afb-895f-850ddc4fb589/ exploit vdb-entry technical-description

cve.org (CVE-2024-7315)

nvd.nist.gov (CVE-2024-7315)

Download JSON