WP STAGING WordPress Backup Plugin – Migration Backup Restore < 3.2.0 - Unauthorized Sensitive Data Exposure

Proof of Concept

1) When an admin creates a staging site, an attacker can capture a `.cache` file which reveals sensitive information including: DB_name, DB_tables, DB_columns.
2) These files can be accessed at these URLs during backup: 
	- http://127.0.0.1/wordpress/wp-content/uploads/wp-staging/clone_options.cache
	- http://127.0.0.1/wordpress/wp-content/uploads/wp-staging/files_to_copy.cache