CVE-2023-7236 Backup Bolt <= 1.3.0 - Sensitive Data Exposure

2024-03-1819:05:53

WPScan

www.cve.org

cve-2023-7236

backup bolt

wordpress

information exposure

debug logs

unauthenticated attackers

sensitive information

6.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

The Backup Bolt WordPress plugin through 1.3.0 is vulnerable to Information Exposure via the unprotected access of debug logs. This makes it possible for unauthenticated attackers to retrieve the debug log which may contain information like system errors which could contain sensitive information.

CNA Affected

[
  {
    "vendor": "Unknown",
    "product": "Backup Bolt",
    "versions": [
      {
        "status": "affected",
        "versionType": "semver",
        "version": "0",
        "lessThanOrEqual": "1.3.0"
      }
    ],
    "defaultStatus": "affected",
    "collectionURL": "https://wordpress.org/plugins"
  }
]