Lucene search
HistoryJan 01, 2024 - 3:15 p.m.
CVE-2023-6113
cve-2023-6113
wordpress
backup
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
42.6%
The WP STAGING WordPress Backup Plugin before 3.1.3 and WP STAGING Pro WordPress Backup Plugin before 5.1.3 do not prevent visitors from leaking key information about ongoing backups processes, allowing unauthenticated attackers to download said backups later.
Affected configurations
Node
wp-stagingwp_stagingRange<3.1.3wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| wp-staging | wp_staging | * | cpe:2.3:a:wp-staging:wp_staging:*:*:*:*:*:wordpress:*:* |
Related
cve
cve
CVE-2023-6113
2024-01-01 15:15:43
prion
prion
Information disclosure
2024-01-01 15:15:00
wpvulndb
wpvulndb
WP Staging (Free < 3.1.3, Pro < 5.1.3) - Unauthenticated Backup Download
2023-12-07 00:00:00
cvelist
cvelist
wpexploit
wpexploit
WP Staging (Free < 3.1.3, Pro < 5.1.3) - Unauthenticated Backup Download
2023-12-07 00:00:00
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
42.6%
Related for NVD:CVE-2023-6113