Total Upkeep < 1.15.9 - Improper Authorization to Unauthenticated Arbitrary File Download

2024-02-0600:00:00

wpscan.com

total upkeep

wordpress backup plugin

boldgrid

improper authorization

unauthorized access

data

vulnerability

unauthenticated attackers

arbitrary files

cli functionality

software

7.1 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.6%

JSON

Description The Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid plugin for WordPress is vulnerable to unauthorized access of data due to an improper authorization check in all versions up to, and including, 1.15.8. This makes it possible for unauthenticated attackers to download arbitrary files using the plugin’s CLI functionality.