PT-2025-16568 · WordPress · Wp Staging Pro

Haidv35 · Published 2025-04-16 · Updated 2025-04-16 · CVE-2025-3104

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions WP STAGING Pro WordPress Backup plugin versions up to and including 6.1.2

Description The issue concerns the exposure of information due to missing capability checks in the getOutdatedPluginsRequest() function. This allows unauthenticated attackers to reveal installed, active or inactive, outdated plugins.

Recommendations For WP STAGING Pro WordPress Backup plugin versions up to and including 6.1.2, update to a version later than 6.1.2 to resolve the issue. As a temporary workaround, consider disabling the getOutdatedPluginsRequest() function until a patch is available.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2025-3104

Affected Products

Wp Staging Pro

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-3104 · Security Note
• https://t.me/cvedetector/23083 · Telegram Post
• https://wp-staging.com/wp-staging-pro-changelog · Note
• https://t.me/cvetracker/21732 · Telegram Post
• https://wordfence.com/threat-intel/vulnerabilities/id/572e290e-9324-4c17-8c3b-fa67233b15c4?source=cve · Note
• https://twitter.com/CVEnew/status/1912430389970288751 · Twitter Post