CVE-2023-7236 Backup Bolt <= 1.3.0 - Sensitive Data Exposure

2024-03-1819:05:53

WPScan

github.com

cve-2023-7236

backup bolt

sensitive data exposure

wordpress plugin

information exposure

unauthenticated attackers

debug logs

system errors

AI Score

Confidence

High

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

The Backup Bolt WordPress plugin through 1.3.0 is vulnerable to Information Exposure via the unprotected access of debug logs. This makes it possible for unauthenticated attackers to retrieve the debug log which may contain information like system errors which could contain sensitive information.

CNA Affected

[
  {
    "vendor": "Unknown",
    "product": "Backup Bolt",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "semver",
        "lessThanOrEqual": "1.3.0"
      }
    ],
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "affected"
  }
]