CVE-2022-4931

The BackupWordPress plugin for WordPress is vulnerable to information disclosure in versions up to and including 3.12 . The root cause is missing authorization on the heartbeat_received() function, which is triggered by the WordPress heartbeat. This flaw allows authenticated attackers with subscr...