Recent Backups <= 0.7 - Directory Traversal
highThe Recent Backups plugin for WordPress is vulnerable to Directory Traversal in versions up to, and including, 0.7 via the 'file' parameter in the 'download-file.php' file. This can allow unauthenticated attackers to extract sensitive data including system files containing usernames and/or passwords.
- CVSS:
- 7.5
- Affected:
- up to 0.7
- Fix:
- No patched version reported
- Disclosed:
- Jul 13, 2015