PT-2024-15238 · WordPress · Backup/Restore Wordpress – Backup Plugin

Dmitry Ignatyev · Published 2024-03-06 · Updated 2025-05-07 · CVE-2023-7232

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Backup and Restore WordPress plugin versions 1.45 and earlier

Description The issue allows unauthenticated users to access sensitive information, such as site configuration, by not protecting some log files. This poses a severe threat to WordPress sites using the affected plugin. Unauthenticated users can access sensitive data.

Recommendations For versions 1.45 and earlier, update to a version that contains a fix for this issue to prevent unauthenticated access to sensitive data. As a temporary workaround, consider restricting access to log files until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2023-7232

Affected Products

Backup/Restore Wordpress – Backup Plugin

References · 8

• 🔥 https://wpscan.com/vulnerability/323fef8a-aa17-4698-9a02-c12d1d390763 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-7232 · Security Note
• https://osv.dev/vulnerability/CVE-2023-7232 · Vendor Advisory
• https://twitter.com/CVEnew/status/1772492322757808166 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1772576323803730215 · Twitter Post
• https://t.me/cvenotify/121136 · Telegram Post
• https://twitter.com/cleantalkcloud/status/1765273697571451131 · Twitter Post
• https://t.me/cvenotify/74648 · Telegram Post