high7.5
CVE-2023-7164
The BackWPup WordPress plugin before 4.0.4 does not prevent Directory Listing in its temporary backup folder, allowing unauthenticated attackers to download ba…
Impact
The BackWPup WordPress plugin before 4.0.4 does not prevent Directory Listing in its temporary backup folder, allowing unauthenticated attackers to download backups of a site's database.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Inpsyde | Backwpup | before 4.0.4 |