Information Exposure Vulnerability in WP STAGING Pro Plugin by WP

CVE-2025-3104

What is CVE-2025-3104?

The WP STAGING Pro WordPress Backup Plugin is exposed to an information disclosure vulnerability that affects all versions up to and including 6.1.2. This weakness stems from inadequate capability checks within the getOutdatedPluginsRequest() function, allowing unauthenticated attackers to access sensitive information regarding both active and inactive plugins. The exploitation of this vulnerability could lead to an attacker gaining insights into potentially vulnerable or outdated plugins used within the site.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References