Directory Traversal Vulnerability in DB Backup Plugin for WordPress
CVE-2014-9119

Currently unrated

Key Information:

Vendor: Wordpress
Status: Db Backup
Vendor: CVE Published:; 31 December 2014

What is CVE-2014-9119?

A directory traversal vulnerability exists in the 'download.php' script of the DB Backup plugin for WordPress versions 4.5 and earlier. This flaw allows remote attackers to exploit vulnerabilities by using a '..' (dot dot) notation in the file parameter. By doing so, they can access arbitrary files on the server, potentially leading to unauthorized disclosure of sensitive information and compromising the security of the affected website.