68 matches found
CVE-2024-2309
The WP STAGING WordPress Backup Plugin (versions < 3.4.0 ) and the wp-staging-pro plugin (versions
CVE-2024-2309: Improper Neutralization of Input During Web Page Generation
The WP STAGING WordPress Backup Plugin WordPress plugin before 3.4.0, wp-staging-pro WordPress plugin before 5.4.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml...
WordPress WP STAGING – Backup Duplicator & Migration Plugin < 3.4.0 is vulnerable to Cross Site Scripting (XSS)
Software WP STAGING – Backup Duplicator & Migration Type Plugin Vulnerable versions 3.4.0 Fixed in 3.4.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-2309 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 311188063c0d Credits...
WordPress Wp Staging Pro Plugin < 5.4.0 is vulnerable to Cross Site Scripting (XSS)
Software Wp Staging Pro Type Plugin Vulnerable versions 5.4.0 Fixed in 5.4.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-2309 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 5ceb32027563 Credits Dmitrii Ignatyev Required...
PT-2024-19666 · WordPress · Wp Staging Pro +1
Name of the Vulnerable Software and Affected Versions: WP STAGING WordPress Backup Plugin versions prior to 3.4.0 wp-staging-pro WordPress plugin versions prior to 5.4.0 Description: The issue concerns the lack of sanitization and escaping of certain settings in the WP STAGING WordPress Backup...
WP Staging (Free < 3.4.0, Pro < 5.4.0) - Admin+ Stored XSS
Description The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup 1. Go to "WP Staging Backup & Migratio...
PT-2024-19909 · WordPress · Instawp Connect
Name of the Vulnerable Software and Affected Versions: InstaWP Connect – 1-click WP Staging & Migration versions 0.1.0.9 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for...
WordPress WP STAGING – Backup Duplicator & Migration Plugin < 3.2.0 is vulnerable to Sensitive Data Exposure
Software WP STAGING – Backup Duplicator & Migration Type Plugin Vulnerable versions 3.2.0 Fixed in 3.2.0 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2023-7204 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 32da6e6cd071 Credits...
Design/Logic Flaw
The WP STAGING WordPress Backup plugin before 3.2.0 allows access to cache files during the cloning process which provides...
CVE-2023-7204
The CVE-2023-7204 entry concerns the WP STAGING WordPress Backup Plugin prior to version 3.2.0, which allows unauthorized access to cache files during the cloning process, leading to sensitive data exposure. Public references (NVD, Patchstack) confirm unauthenticated access risk and indicate the ...
CVE-2023-7204 WP STAGING WordPress Backup Plugin < 3.2.0 - Unauthorized Sensitive Data Exposure
The WP STAGING WordPress Backup plugin before 3.2.0 allows access to cache files during the cloning process which provides...
CVE-2023-7204: Exposure of Resource to Wrong Sphere
The WP STAGING WordPress Backup plugin before 3.2.0 allows access to cache files during the cloning process which provides...
Code injection
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in InstaWP Team InstaWP Connect – 1-click WP Staging & Migration.This issue affects InstaWP Connect – 1-click WP Staging & Migration: from n/a through 0.1.0.9...
Information disclosure
The WP STAGING WordPress Backup Plugin before 3.1.3 and WP STAGING Pro WordPress Backup Plugin before 5.1.3 do not prevent visitors from leaking key information about ongoing backups processes, allowing unauthenticated attackers to download said backups later...
CVE-2023-6113 WP Staging (Free < 3.1.3, Pro < 5.1.3) - Unauthenticated Backup Download
The WP STAGING WordPress Backup Plugin before 3.1.3 and WP STAGING Pro WordPress Backup Plugin before 5.1.3 do not prevent visitors from leaking key information about ongoing backups processes, allowing unauthenticated attackers to download said backups later...
CVE-2023-6113
CVE-2023-6113 affects WP STAGING WordPress Backup Plugin <3.1.3 and WP STAGING Pro
WordPress Plugin WP STAGING Security Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability previously...
CVE-2023-6113: Undefined Security Weakness
The WP STAGING WordPress Backup Plugin before 3.1.3 and WP STAGING Pro WordPress Backup Plugin before 5.1.3 do not prevent visitors from leaking key information about ongoing backups processes, allowing unauthenticated attackers to download said backups later...
WP Staging (Free < 3.1.3, Pro < 5.1.3) - Unauthenticated Backup Download
Description The plugin does not prevent visitors from leaking key information about ongoing backups processes, allowing unauthenticated attackers to download said backups later. PoC The plugin creates temporary cache files when backing up sites, which are publicly accessible to anyone. Said cache...
CVE-2022-2737
The WP STAGING WordPress plugin before 2.9.18 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...