Skip to content
OpenAdvisories
High · 7.5 CVE-2023-6271 EUVD-2023-58515GHSA-28vh-7gjh-8xmq

Backup Migration Staging < 1.3.6 - Sensitive Data Exposure

Published Jan 1, 2024 · Updated Jun 11, 2025 · Assigned by WPScan

Description

The Backup Migration WordPress plugin before 1.3.6 stores in-progress backups information in easy to find, publicly-accessible files, which may allow attackers monitoring those to leak sensitive information from the site's backups.

Affected products

VendorProductAffectedFixed
— Backup Migration < 1.3.6 1.3.6

References