Sensitive Information Exposure Vulnerability Affects All Versions of All-in-One WP Migration and Backup plugin

CVE-2024-8852

Summary

The All-in-One WP Migration and Backup plugin for WordPress presents a vulnerability that exposes sensitive information due to improperly secured log files. This issue allows unauthenticated attackers to potentially gain access to sensitive data such as file paths and other critical system information. The vulnerability affects all versions of the plugin up to and including version 7.86. Website administrators using this plugin should be aware of the risks posed by this exposure and take necessary precautions to secure their WordPress installations.

References