CVE-2018-19456

The WP Backup+ aka WPbackupplus plugin through 2018-11-22 for WordPress allows remote attackers to obtain sensitive information from server folders and files, as demonstrated by download.sql...

Design/Logic Flaw

The WP Backup+ aka WPbackupplus plugin through 2018-11-22 for WordPress allows remote attackers to obtain sensitive information from server folders and files, as demonstrated by download.sql...

CVE-2018-19456

CVE-2018-19456 affects the libgit2 library (used by various projects) and enables code execution via a malicious .gitmodules file. Connected advisories confirm a fix was released (e.g., openSUSE-SU-2019:0021-1 and related OSV/Red Hat entries) and describe remediation by updating libgit2. The WP B...