CVE-2024-5551 WP STAGING PRO - Backup Duplicator & Migration <= 5.6.0 - Cross-Site Request Forgery to Limited Local File Inclusion

What is CVE-2024-5551?

CVE-2024-5551 is a high-severity vulnerability in WPStaging WP STAGING Pro WordPress Backup Plugin, published on 14 Jun 2024. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

The WP STAGING Pro WordPress Backup Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.6.0. This is due to missing or incorrect nonce validation on the 'sub' parameter called from the WP STAGING WordPress Backup Plugin - Backup Duplicator & Migration plugin. This makes it possible for unauthenticated attackers to include any local files that end in '-settings.php' via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.

Weakness: CWE-352

Which versions are affected by CVE-2024-5551?

It affects 1 product.

Products include Wp-Staging Wp Staging.

How do I fix CVE-2024-5551?

No fix has been published for CVE-2024-5551 yet. Limit exposure of the affected software until one is available.

Is CVE-2024-5551 being exploited?

There is no known exploitation of CVE-2024-5551 in the wild and no public exploit code.

Other vulnerabilities in WPStaging WP STAGING Pro WordPress Backup Plugin

• CVE-2024-4469 Migration Backup Restore < 3.5.0 - Admin+ SSRF High 7.5
• CVE-2023-7204 WP STAGING WordPress Backup Plugin < 3.2.0 - Unauthorized Sensitive Data Exposure High 7.5
• CVE-2023-6113 WP Staging (Free < 3.1.3, Pro < 5.1.3) - Unauthenticated Backup Download High 7.5
• CVE-2024-2309 WP Staging < 3.4.0, 5.4.0 (Pro Version) - Admin+ Stored XSS Medium 4.8
• CVE-2022-2737 WP STAGING < 2.9.18 - Admin+ Stored Cross-Site Scripting Medium 4.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-26x3-q5rm-m2v4.