CVE-2024-3034

The BackUpWordPress plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 3.13 via the hmbkpdirectorybrowse parameter. This makes it possible for authenticated attackers, with administrator-level access and above, to traverse directories outside of the...

CVE-2024-3034

CVE-2024-3034 affects the BackUpWordPress plugin for WordPress. It enables Directory Traversal via the hmbkp_directory_browse parameter in all versions up to 3.13. Exploitation requires administrator-level access or higher. The description and impact are stated in the provided sources; no explici...

WordPress plugin BackUpWordPress 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

CVE-2024-3034: Improper Limitation of a Pathname to a Restricted Directory

The BackUpWordPress plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 3.13 via the hmbkpdirectorybrowse parameter. This makes it possible for authenticated attackers, with administrator-level access and above, to traverse directories outside of the...