JetBackup <= 2.0.9.7 - Sensitive Information Exposure via Directory Listing

JetBackup WordPress plugin = 2.0.9.9 does not use index files to prevent directory listing in certain configurations, letting malicious actors leak backup files, exploit requires access to the web server. id: CVE-2023-7165 info: name: JetBackup = 2.0.9.7 - Sensitive Information Exposure via...

CVE-2023-7165

creationtimestamp| type| source ---|---|--- 2024-02-27 10:26:10+00:00| seen| https://t.me/ctinow/194184 2024-02-27 10:26:29+00:00| seen| https://t.me/ctinow/194198 2026-04-09 03:37:19+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2023/CVE-2023-7165.yam...

CVE-2023-7165

The JetBackup WordPress plugin before 2.0.9.9 doesn't use index files to prevent public directory listing of sensitive directories in certain configurations, which allows malicious actors to leak backup files...

CVE-2023-7165 JetBackup < 2.0.9.9 - Directory Listing Exposing Backups

The JetBackup WordPress plugin before 2.0.9.9 doesn't use index files to prevent public directory listing of sensitive directories in certain configurations, which allows malicious actors to leak backup files...

CVE-2023-7165

The JetBackup WordPress plugin (versions prior to 2.0.9.9 ) is vulnerable to sensitive information exposure due to a lack of index files in certain configurations. This allows malicious actors with web server access to perform public directory listing and leak sensitive backup files . To remediat...