Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7wh6-6h78-phxw

Опубликовано: 16 апр. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

The WP STAGING Pro WordPress Backup Plugin for WordPress is vulnerable to Information Exposure in all versions up to and including 6.1.2 due to missing capability checks on the getOutdatedPluginsRequest() function. This makes it possible for unauthenticated attackers to reveal outdated installed active or inactive plugins.

The WP STAGING Pro WordPress Backup Plugin for WordPress is vulnerable to Information Exposure in all versions up to and including 6.1.2 due to missing capability checks on the getOutdatedPluginsRequest() function. This makes it possible for unauthenticated attackers to reveal outdated installed active or inactive plugins.

EPSS

Процентиль: 30%
0.0011
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-200

Связанные уязвимости

CVSS3: 5.3
nvd
10 месяцев назад

The WP STAGING Pro WordPress Backup Plugin for WordPress is vulnerable to Information Exposure in all versions up to and including 6.1.2 due to missing capability checks on the getOutdatedPluginsRequest() function. This makes it possible for unauthenticated attackers to reveal outdated installed active or inactive plugins.

EPSS

Процентиль: 30%
0.0011
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-200