CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
What the vulnerability does
Insertion of Sensitive Information into Log File vulnerability in WebToffee WordPress Backup & Migration wp-migration-duplicator allows Retrieve Embedded Sensitive Data.This issue affects WordPress Backup & Migration: from n/a through <= 1.5.3.
Explanation of Vulnerability in Simple Terms
The WordPress Backup & Migration plugin through version 1.5.3 exposes sensitive information in backup files or logs. An attacker without authentication can access this data over the network, though exploitation requires specific conditions. The vulnerability does not allow modification or deletion of data, only unauthorized reading of confidential information.
What an attacker can do
Read sensitive information from backup files or plugin logs without authentication.
Potential impact on your site
Confidential data in backups or logs may be exposed to unauthenticated attackers, risking credential or configuration leaks.
Conditions required to exploit
Network access to the site; specific conditions must be met to exploit (attack complexity is high).
Key dates
External resources
