CVE-2022-4931

The CVE-2022-4931 issue affects the WordPress BackupWordPress plugin (versions up to 3.12). Root cause: missing authorization on the heartbeat_received() function triggered by WordPress heartbeats, allowing authenticated users with subscriber-level permissions or higher to retrieve backup paths a...