CVE-2023-7236

2024-03-1819:15:06

[email protected]

web.nvd.nist.gov

cve-2023-7236

backup bolt

wordpress plugin

information exposure

debug logs

vulnerability

9.1 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

The Backup Bolt WordPress plugin through 1.3.0 is vulnerable to Information Exposure via the unprotected access of debug logs. This makes it possible for unauthenticated attackers to retrieve the debug log which may contain information like system errors which could contain sensitive information.

Affected configurations

Vulners

Node

boltbolt_cmsRange≤1.3.0

VendorProductVersionCPE
boltbolt_cms*cpe:2.3:a:bolt:bolt_cms:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
bolt	bolt_cms	*	cpe:2.3:a:bolt:bolt_cms::::::::

CNA Affected

[
  {
    "vendor": "Unknown",
    "product": "Backup Bolt",
    "versions": [
      {
        "status": "affected",
        "versionType": "semver",
        "version": "0",
        "lessThanOrEqual": "1.3.0"
      }
    ],
    "defaultStatus": "affected",
    "collectionURL": "https://wordpress.org/plugins"
  }
]