50 matches found
WordPress plugin WP STAGING security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...
CVE-2024-3412
CVE-2024-3412 affects the WP STAGING WordPress Backup Plugin – Migration Backup Restore. It is vulnerable in versions
WordPress WP STAGING – Backup Duplicator & Migration Plugin <= 3.4.3 is vulnerable to Arbitrary File Upload
Software WP STAGING – Backup Duplicator & Migration Type Plugin Vulnerable versions = 3.4.3 Fixed in 3.5.0 OWASP Top 10 A1: Injection Classification Arbitrary File Upload CVE CVE-2024-3412 Patch priority Low CVSS severity Low 7.2 Developer Claim ownership PSID af3b452b0d24 Credits haidv35 Require...
WordPress WP STAGING Pro plugin <= 5.4.3 - Sensitive Information Exposure via Log File vulnerability
Sensitive Information Exposure via Log File vulnerability discovered by haidv35 in WordPress Plugin Wp Staging Pro versions = 5.4.3...
WordPress Wp Staging Pro Plugin <= 5.4.3 is vulnerable to Sensitive Data Exposure
Software Wp Staging Pro Type Plugin Vulnerable versions = 5.4.3 Fixed in 5.5.0 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-3682 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID eb5b93b83c9e Credits haidv35 Required privilege...
CVE-2024-2309 WP Staging < 3.4.0, 5.4.0 (Pro Version) - Admin+ Stored XSS
The WP STAGING WordPress Backup Plugin WordPress plugin before 3.4.0, wp-staging-pro WordPress plugin before 5.4.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml...
CVE-2024-2309 WP Staging < 3.4.0, 5.4.0 (Pro Version) - Admin+ Stored XSS
The WP STAGING WordPress Backup Plugin WordPress plugin before 3.4.0, wp-staging-pro WordPress plugin before 5.4.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml...
CVE-2024-2309
Summary of CVE-2024-2309 : The WP STAGING WordPress Backup Plugin (versions prior to 3.4.0) and the wp-staging-pro WordPress plugin (prior to 5.4.0) fail to sanitize and escape certain settings. This can allow high-privilege users (e.g., administrators) to perform Stored Cross-Site Scripting even...
WordPress WP STAGING – Backup Duplicator & Migration Plugin < 3.4.0 is vulnerable to Cross Site Scripting (XSS)
Software WP STAGING – Backup Duplicator & Migration Type Plugin Vulnerable versions 3.4.0 Fixed in 3.4.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-2309 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 311188063c0d Credits...
WordPress Wp Staging Pro Plugin < 5.4.0 is vulnerable to Cross Site Scripting (XSS)
Software Wp Staging Pro Type Plugin Vulnerable versions 5.4.0 Fixed in 5.4.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-2309 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 5ceb32027563 Credits Dmitrii Ignatyev Required...
PT-2024-19666 · WordPress · Wp Staging Pro +1
Name of the Vulnerable Software and Affected Versions: WP STAGING WordPress Backup Plugin versions prior to 3.4.0 wp-staging-pro WordPress plugin versions prior to 5.4.0 Description: The issue concerns the lack of sanitization and escaping of certain settings in the WP STAGING WordPress Backup...
WP Staging (Free < 3.4.0, Pro < 5.4.0) - Admin+ Stored XSS
Description The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup 1. Go to "WP Staging Backup & Migratio...
WordPress WP STAGING – Backup Duplicator & Migration Plugin < 3.2.0 is vulnerable to Sensitive Data Exposure
Software WP STAGING – Backup Duplicator & Migration Type Plugin Vulnerable versions 3.2.0 Fixed in 3.2.0 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2023-7204 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 32da6e6cd071 Credits...
PT-2024-19909 · WordPress · Instawp Connect
Name of the Vulnerable Software and Affected Versions: InstaWP Connect – 1-click WP Staging & Migration versions 0.1.0.9 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for...
Design/Logic Flaw
The WP STAGING WordPress Backup plugin before 3.2.0 allows access to cache files during the cloning process which provides...
CVE-2023-7204 WP STAGING WordPress Backup Plugin < 3.2.0 - Unauthorized Sensitive Data Exposure
The WP STAGING WordPress Backup plugin before 3.2.0 allows access to cache files during the cloning process which provides...
CVE-2023-7204
The CVE-2023-7204 entry concerns the WP STAGING WordPress Backup Plugin prior to version 3.2.0, which allows unauthorized access to cache files during the cloning process, leading to sensitive data exposure. Public references (NVD, Patchstack) confirm unauthenticated access risk and indicate the ...
Code injection
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in InstaWP Team InstaWP Connect – 1-click WP Staging & Migration.This issue affects InstaWP Connect – 1-click WP Staging & Migration: from n/a through 0.1.0.9...
Information disclosure
The WP STAGING WordPress Backup Plugin before 3.1.3 and WP STAGING Pro WordPress Backup Plugin before 5.1.3 do not prevent visitors from leaking key information about ongoing backups processes, allowing unauthenticated attackers to download said backups later...