VulnerabilityAnalyzed
CVE-2023-7236
The Backup Bolt WordPress plugin through 1.3.0 is vulnerable to Information Exposure via the unprotected access of debug logs.
MEDIUM 4.7EPSS 0.55%
Does this matter?
Lower severity and a low EPSS score (0.55%). Track it; it rarely justifies an emergency change on its own.
Description
The Backup Bolt WordPress plugin through 1.3.0 is vulnerable to Information Exposure via the unprotected access of debug logs. This makes it possible for unauthenticated attackers to retrieve the debug log which may contain information like system errors which could contain sensitive information.
- CVSS 3.1
- 4.7 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N
- EPSS
- 0.55% probability · 44th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-79
- Affected
- backupbolt/backup bolt
- Source
- contact@wpscan.com
References
- https://wpscan.com/vulnerability/2a4557e2-b764-4678-a6d6-af39dd1ba76b/Exploit, Third Party Advisory
- https://wpscan.com/vulnerability/2a4557e2-b764-4678-a6d6-af39dd1ba76b/Exploit, Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.