WordPress Plugin Vulnerabilities

Backupbuddy - importbuddy.php step Parameter Remote PHP Information Disclosure

Description

The backupbuddy WordPress plugin was affected by an importbuddy.php step Parameter Remote PHP Information Disclosure security vulnerability.

Affects Plugins

Plugin icon
backupbuddy
Fixed in 3.0

References

CVE
CVE-2013-2744
URL
https://packetstormsecurity.com/files/#120923/
URL
https://seclists.org/fulldisclosure/2013/Mar/206

Miscellaneous

Verified
No
WPVDB ID
4bcd7914-c7a2-4b77-9892-025904a121ca

Timeline

Publicly Published
2015-03-24 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2019-10-14
Title
WordPress <= 5.2.3 - JSON Request Cache Poisoning
Published
2024-11-14
Title
External Database Based Actions <= 0.1 - Authenticated (Subscriber+) Authentication Bypass
Published
2016-05-26
Title
Jetpack 2.0-4.0.2 - Shortcode Stored Cross-Site Scripting (XSS)
Published
2024-11-11
Title
Relais 2FA <= 1.0 - Authentication Bypass
Published
2025-03-11
Title
BP Email Assign Templates <= 1.6 - Missing Authorization to Authorization Bypass