{ "id": "CVE-2023-7164", "sourceIdentifier": "contact@wpscan.com", "published": "2024-04-08T18:15:08.287", "lastModified": "2024-04-08T18:48:40.217", "vulnStatus": "Awaiting Analysis", "descriptions": [ { "lang": "en", "value": "The BackWPup WordPress plugin before 4.0.4 does not prevent visitors from leaking key information about ongoing backups, allowing unauthenticated attackers to download backups of a site's database." }, { "lang": "es", "value": "El complemento BackWPup de WordPress anterior a 4.0.4 no impide que los visitantes filtren informaci\u00f3n clave sobre las copias de seguridad en curso, lo que permite a atacantes no autenticados descargar copias de seguridad de la base de datos de un sitio." } ], "metrics": {}, "references": [ { "url": "https://wpscan.com/vulnerability/79b07f37-2c6b-4846-bb28-91a1e5bf112e/", "source": "contact@wpscan.com" } ] }