Sensitive Information Exposure in Total Upkeep WordPress Backup Plugin by BoldGrid

CVE-2020-36848

What is CVE-2020-36848?

The Total Upkeep – WordPress Backup Plugin by BoldGrid is subject to a vulnerability that allows unauthorized access to sensitive information. Unauthenticated attackers can exploit this weakness to locate the backup files found in env-info.php and restore-info.json. As a result, these attackers could potentially download sensitive backup files, which could contain critical data, posing a significant security risk to users and their websites. It's essential for users of the plugin to apply any available updates and take necessary precautions to secure their backup files.

References