CVE-2013-2741

2013-04-0210:00:00

mitre

www.cve.org

cve-2013-2741

backupbuddy plugin

importbuddy.php

wordpress

authentication

remote attackers

sensitive information

overwrite files

delete files

direct request

step=1 request

step=2 request

step=3 request

step=7 request

AI Score

6.7

Confidence

Low

EPSS

0.006

Percentile

79.5%

JSON

importbuddy.php in the BackupBuddy plugin 1.3.4, 2.1.4, 2.2.25, 2.2.28, and 2.2.4 for WordPress does not require that authentication be enabled, which allows remote attackers to obtain sensitive information, or overwrite or delete files, via vectors involving a (1) direct request, (2) step=1 request, (3) step=2 or step=3 request, or (4) step=7 request.