CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
The BackUpWordPress plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 3.13 via the hmbkp_directory_browse parameter. This makes it possible for authenticated attackers, with administrator-level access and above, to traverse directories outside of the context in which the plugin should allow.
Explanation of Vulnerability in Simple Terms
BackUpWordPress versions 3.13 and earlier contain a path traversal vulnerability that allows high-privilege users to read files outside the intended backup directory. An attacker with administrator access can craft requests to access sensitive files on the server. The vulnerability has low confidentiality impact and requires administrative privileges to exploit.
What an attacker can do
Read arbitrary files on the server outside the backup directory.
Potential impact on your site
Administrators with malicious intent or compromised admin accounts could access sensitive server files.
Conditions required to exploit
Attacker must have administrator access to the WordPress site.
Key dates
External resources
Related vulnerabilities
