CVE-2023-7164 BackWPup < 4.0.4 - Unauthenticated Backup Download
Unauthenticated attackers can download site database backups due to directory listing in the BackWPup plugin's temporary folder.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-7164?
CVE-2023-7164 is a high-severity vulnerability in Unknown BackWPup, published on 8 Apr 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The BackWPup WordPress plugin before 4.0.4 does not prevent Directory Listing in its temporary backup folder, allowing unauthenticated attackers to download backups of a site's database.
Which versions are affected by CVE-2023-7164?
It affects 1 product.
Products include Inpsyde Backwpup.
How do I fix CVE-2023-7164?
No fix has been published for CVE-2023-7164 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-7164 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2023-7164 exists.
Public exploit code: 1 Nuclei template.
Other vulnerabilities in Unknown BackWPup
- CVE-2023-5504 BackWPup <= 4.0.1 - Authenticated (Administrator+) Directory Traversal
- CVE-2017-2551 Information disclosure in backwpup
- CVE-2023-5505 BackWPup <= 4.0.1 - Authenticated (Administrator+) Directory Traversal
- CVE-2023-5775 BackWPup <= 4.0.2 - Plaintext Storage of Backup Destination Password
Sources
Also known as GHSA-4v53-9g52-rm7v.