PT-2025-1819 · WordPress · Wp Database Backup

Noah Stead + 1 · Published 2025-01-09 · Updated 2025-01-09 · CVE-2024-12330

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions WP Database Backup – Unlimited Database & Files Backup by Backup for WP plugin for WordPress versions up to, and including, 7.3

Description The issue allows unauthenticated attackers to extract sensitive data, including all information stored in the database, via publicly accessible back-up files. This is a case of Sensitive Information Exposure.

Recommendations For versions up to, and including, 7.3, update to a version that fixes the Sensitive Information Exposure issue to prevent unauthenticated attackers from accessing sensitive data. As a temporary workaround, consider restricting access to publicly accessible back-up files until a patch is available.

Fix

Weakness Enumeration

CWE-530

Related Identifiers

CVE-2024-12330

Affected Products

Wp Database Backup

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2024-12330 · Security Note
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3209387%40wp-database-backup&new=3209387%40wp-database-backup&sfp_email=&sfph_mail= · Note
• https://twitter.com/VulmonFeeds/status/1877458899541905829 · Twitter Post
• https://t.me/cvedetector/14842 · Telegram Post
• https://twitter.com/CVEnew/status/1877315767726755959 · Twitter Post
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3209380%40wp-database-backup&new=3209380%40wp-database-backup&sfp_email=&sfph_mail= · Note
• https://wordfence.com/threat-intel/vulnerabilities/id/3f36839b-850e-4c39-aa61-4fd7a89cd5bc?source=cve · Note