Sensitive Information Exposure Vulnerability Affects WordPress Backup Plugin

CVE-2024-10028

7.5HIGH

Key Information

Vendor: Everest Backup
Status: Everest Backup
Vendor: CVE Published:; 6 November 2024

Summary

The Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.2.13 via the exposed process stats file during the backup process. This makes it possible for unauthenticated attackers to obtain an archive file name and download the site's backup.

CVSS V3.1

Score:

7.5

Severity:

HIGH

Confidentiality:

High

Integrity:

None

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published.
Nov 6, 2024

Collectors

NVD Database