CVE-2024-7315
The Migration, Backup, Staging WordPress plugin before 0.9.106 does not use sufficient randomness in the filename that is created when generating a backup, which could be bruteforced by attackers to leak sensitive information about said backups.
- Score
- CVSS 3.1 7.5 High
- Status
- Analyzed - contact@wpscan.com
- Published
- 2024-10-02
- Last modified
- 2025-08-27
- Weaknesses
- CWE-338
Affected products
- Backup (Unknown)
- Migration (Unknown)
- Staging (Unknown)
- Migration, Backup, Staging (Wpvivid)
- Migration Backup Staging (Wpvivid Team)
References
- https://wpscan.com/vulnerability/456b728b-a451-4afb-895f-850ddc4fb589/
