Information Exposure Vulnerability in WP STAGING Pro Plugin by WP

CVE-2025-3104

What is CVE-2025-3104?

The WP STAGING Pro WordPress Backup Plugin is exposed to an information disclosure vulnerability that affects all versions up to and including 6.1.2. This weakness stems from inadequate capability checks within the getOutdatedPluginsRequest() function, allowing unauthenticated attackers to access sensitive information regarding both active and inactive plugins. The exploitation of this vulnerability could lead to an attacker gaining insights into potentially vulnerable or outdated plugins used within the site.

References