Description

WordPress Plugin WP STAGING WordPress Backup-Migration Backup Restore is prone to an information disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may help in launching further attacks. WordPress Plugin WP STAGING WordPress Backup-Migration Backup Restore version 3.4.3 is vulnerable; prior versions may also be affected.

Remediation

Update to plugin version 3.5.0 or latest

References

https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/wp-staging/wp-staging-343-and-wp-staging-pro-543-sensitive-information-exposure-via-log-file

https://plugins.svn.wordpress.org/wp-staging/trunk/readme.txt

Related Vulnerabilities

WordPress Plugin Post Form-Registration Form-Profile Form for User Profiles and Content Forms for User Submissions Security Bypass (2.3.2)

WordPress Plugin wp audio gallery playlist 'playlist.php' SQL Injection (0.12)

WordPress Plugin Portfolio for Elementor, Image Gallery & Post Grid-PowerFolio Unspecified Vulnerability (2.3.1)

Apache 2.x version older than 2.0.55

WordPress Plugin WCFM Membership-WooCommerce Memberships for Multivendor Marketplace Insecure Direct Object Reference (2.10.7)

Severity

High

Classification

CVE-2024-3682 CWE-200 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Missing Update Information Disclosure