CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in WPBackItUp Backup and Restore WordPress allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Backup and Restore WordPress: from n/a through 1.50.
Explanation of Vulnerability in Simple Terms
The WPBackItUp Backup and Restore plugin for WordPress versions up to 1.50 lacks proper authorization checks on certain functions. An unauthenticated attacker can modify site data without permission. The vulnerability requires no user interaction and is exploitable over the network. Site administrators should update to a version newer than 1.50 immediately.
What an attacker can do
Modify site data without authentication or authorization.
Potential impact on your site
Attackers can alter your site's backup data or settings without logging in.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
