CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
What the vulnerability does
Authentication Bypass Using an Alternate Path or Channel vulnerability in revmakx Backup and Staging by WP Time Capsule wp-time-capsule allows Password Recovery Exploitation.This issue affects Backup and Staging by WP Time Capsule: from n/a through <= 1.22.25.
Explanation of Vulnerability in Simple Terms
Backup and Staging by WP Time Capsule versions 1.22.25 and earlier contain an authentication bypass vulnerability. An attacker can read sensitive data without logging in due to improper access controls. The vulnerability affects all installations of the plugin up to the stated version. Site administrators should update immediately to a patched release.
What an attacker can do
Read sensitive backup and staging data without authentication.
Potential impact on your site
Attackers can access your site's backups and staging environments, exposing database contents and file data.
Conditions required to exploit
Network access only; no login or user interaction required.
Key dates
External resources
Related vulnerabilities
