WordPress Plugin Vulnerabilities

Backupbuddy - importbuddy.php Direct Request Remote Backup File Disclosure

Description

The backupbuddy WordPress plugin was affected by an importbuddy.php Direct Request Remote Backup File Disclosure security vulnerability.

Affects Plugins

Plugin icon
backupbuddy
Fixed in 3.0

References

CVE
CVE-2013-2741
URL
https://packetstormsecurity.com/files/#120923/
URL
https://seclists.org/fulldisclosure/2013/Mar/206

Classification

Type
AUTHBYPASS
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-287

Miscellaneous

Verified
No
WPVDB ID
b9d856db-5203-4c94-8e0b-d0694ea1089d

Timeline

Publicly Published
2013-03-24 (about 13 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2023-12-27
Title
Checkout Mestres WP < 7.1.9.8 - Authentication Bypass via Password Reset
Published
2023-05-22
Title
MStore API < 3.9.2 - Authentication Bypass
Published
2014-08-01
Title
GD Star Rating 1.9.18 - Export Security Bypass
Published
2020-02-19
Title
Duplicator 1.3.24 & 1.3.26 - Unauthenticated Arbitrary File Download
Published
2014-09-17
Title
Custom Contact Forms < 5.1.0.4 - Unauthenticated Database Import/Export