Information Exposure Vulnerability in WP STAGING Pro Plugin by WP
CVE-2025-3104

5.3MEDIUM

Key Information:

Vendor
WPstaging
Status
WP Staging Pro WordPress Backup Plugin
Vendor
CVE Published:
16 April 2025

Summary

The WP STAGING Pro WordPress Backup Plugin is exposed to an information disclosure vulnerability that affects all versions up to and including 6.1.2. This weakness stems from inadequate capability checks within the getOutdatedPluginsRequest() function, allowing unauthenticated attackers to access sensitive information regarding both active and inactive plugins. The exploitation of this vulnerability could lead to an attacker gaining insights into potentially vulnerable or outdated plugins used within the site.

Affected Version(s)

WP STAGING Pro WordPress Backup Plugin * <= 6.1.2

References

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

haidv35
.