Skip to content
OpenAdvisories
Medium · 4.7 CVE-2023-7236 EUVD-2023-59417GHSA-546c-jgxm-3c33

Backup Bolt <= 1.3.0 - Sensitive Data Exposure

Published Mar 18, 2024 · Updated Dec 4, 2024 · Assigned by WPScan

Description

The Backup Bolt WordPress plugin through 1.3.0 is vulnerable to Information Exposure via the unprotected access of debug logs. This makes it possible for unauthenticated attackers to retrieve the debug log which may contain information like system errors which could contain sensitive information.

Affected products

VendorProductAffectedFixed
— Backup Bolt ≤ 1.3.0 —

References