CVE-2023-7204 WP STAGING WordPress Backup Plugin < 3.2.0 - Unauthorized Sensitive Data Exposure
Unauthorized attackers can access sensitive cache files during the cloning process in the WP STAGING WordPress Backup plugin.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-7204?
CVE-2023-7204 is a high-severity vulnerability in Unknown WP STAGING WordPress Backup Plugin, published on 29 Jan 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The WP STAGING WordPress Backup plugin before 3.2.0 allows access to cache files during the cloning process which provides
Weakness: CWE-668
Which versions are affected by CVE-2023-7204?
It affects 1 product.
Products include Wp-Staging Wp Staging.
How do I fix CVE-2023-7204?
No fix has been published for CVE-2023-7204 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-7204 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2023-7204 exists.
Other vulnerabilities in Unknown WP STAGING WordPress Backup Plugin
- CVE-2024-5551 WP STAGING PRO - Backup Duplicator & Migration <= 5.6.0 - Cross-Site Request Forgery to Limited Local File Inclusion
- CVE-2024-4469 Migration Backup Restore < 3.5.0 - Admin+ SSRF
- CVE-2023-6113 WP Staging (Free < 3.1.3, Pro < 5.1.3) - Unauthenticated Backup Download
- CVE-2024-2309 WP Staging < 3.4.0, 5.4.0 (Pro Version) - Admin+ Stored XSS
- CVE-2022-2737 WP STAGING < 2.9.18 - Admin+ Stored Cross-Site Scripting
Sources
Also known as GHSA-m653-22c6-v2w8.