WordPress Plugin Vulnerabilities
Backuply – Backup, Restore, Migrate and Clone < 1.2.4 - Admin+ Directory Traversal
Description
The plugin is vulnerable to Directory Traversal via the node_id parameter in the backuply_get_jstree function.
This makes it possible for attackers with administrator privileges or higher to read the contents of arbitrary files on the server, which can contain sensitive information.
Affects Plugins
Fixed in 1.2.4 References
Classification
Type
LFI
OWASP top 10
CWE
CVSS
Miscellaneous
Original Researcher
Bence Szalai
Verified
No
WPVDB ID
Timeline
Publicly Published
2024-01-26 (about 2 years ago)
Added
2024-01-26 (about 2 years ago)
Last Updated
2024-01-26 (about 2 years ago)
WPScan 