CVE-2024-5551

🗓️ 14 Jun 2024 05:39:14Reported by WordfenceType

The WP STAGING Pro WordPress Backup Plugin is vulnerable to Cross-Site Request Forgery due to missing nonce validation, allowing unauthenticated attackers to include local files through a forged request

Reporter	Title	Published	Views	Family All 11
CNNVD	WordPress plugin WP STAGING Pro WordPress Backup Security Vulnerability	14 Jun 202400:00	–	cnnvd
Cvelist	CVE-2024-5551 WP STAGING PRO - Backup Duplicator & Migration <= 5.6.0 - Cross-Site Request Forgery to Limited Local File Inclusion	14 Jun 202405:39	–	cvelist
EUVD	EUVD-2024-46750	3 Oct 202520:07	–	euvd
NVD	CVE-2024-5551	14 Jun 202406:15	–	nvd
Patchstack	Wordpress Wp Staging Pro plugin <= 5.6.0 - Cross-Site Request Forgery to Limited Local File Inclusion vulnerability	14 Jun 202403:08	–	patchstack
Patchstack	WordPress Wp Staging Pro Plugin <= 5.6.0 is vulnerable to Local File Inclusion	14 Jun 202400:00	–	patchstack
Positive Technologies	PT-2024-36536 · WordPress · Wp Staging Pro	14 Jun 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-5551	5 Feb 202506:15	–	redhatcve
Vulnrichment	CVE-2024-5551 WP STAGING PRO - Backup Duplicator & Migration <= 5.6.0 - Cross-Site Request Forgery to Limited Local File Inclusion	14 Jun 202405:39	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (June 10, 2024 to June 16, 2024)	20 Jun 202413:40	–	wordfence

NVD

Vulners

Node

wp-staging wp_stagingRange<5.6.1wordpress

[
  {
    "vendor": "WPStaging",
    "product": "WP STAGING Pro WordPress Backup Plugin",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "5.6.0",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/browser/wp-staging/trunk/Backend/views/settings/tabs/remote-storages.php
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/2a99a21c-d4f1-4cdb-b1f1-31b3cf666b80
wp-staging	www.wp-staging.com/

08 Apr 2026 17:19Current

7.4High risk

Vulners AI Score7.4

CVSS 3.17.5 - 8.8

EPSS0.00432

SSVC

CWE-352