Information Exposure Vulnerability in WP STAGING Pro Plugin by WP
CVE-2025-3104
5.3MEDIUM
Key Information:
- Vendor
- WPstaging
- Status
- WP Staging Pro WordPress Backup Plugin
- Vendor
- CVE Published:
- 16 April 2025
Summary
The WP STAGING Pro WordPress Backup Plugin is exposed to an information disclosure vulnerability that affects all versions up to and including 6.1.2. This weakness stems from inadequate capability checks within the getOutdatedPluginsRequest() function, allowing unauthenticated attackers to access sensitive information regarding both active and inactive plugins. The exploitation of this vulnerability could lead to an attacker gaining insights into potentially vulnerable or outdated plugins used within the site.
Affected Version(s)
WP STAGING Pro WordPress Backup Plugin * <= 6.1.2
References
CVSS V3.1
Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved
Credit
haidv35