PT-2026-37001 · Unknown · Backup Migration

Wadeek · Published 2026-05-05 · Updated 2026-05-05 · CVE-2023-54346

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Backup Migration version 1.2.8

Description An information disclosure issue allows unauthenticated attackers to download complete database backups by accessing predictable file paths. Attackers can enumerate backup directories via configuration files and complete logs to construct direct download URLs and retrieve sensitive backup archives containing full database dumps.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-538

Related Identifiers

CVE-2023-54346

Affected Products

Backup Migration

References · 6

• 🔥 https://exploit-db.com/exploits/51445 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-54346 · Security Note
• https://vulncheck.com/advisories/wordpress-plugin-backup-migration-unauthenticated-database-backup-download · Note
• https://backupbliss.com · Note
• https://downloads.wordpress.org/plugin/backup-backup.1.2.8.zip · Note
• https://t.me/cveNotify/162159 · Telegram Post