Museder Restoreone
Monthly
Unauthenticated sensitive data exposure in the Museder RestoreOne WordPress plugin (versions up to 2.7.276) allows remote attackers to access confidential information without authentication. With a CVSS score of 7.5 (High), the flaw requires no user interaction and has high confidentiality impact (C:H) but no integrity or availability effect. No public exploit code or active exploitation has been identified at time of analysis, and the risk is confined to WordPress sites with this specific plugin installed.
Unauthenticated sensitive data exposure in the Museder RestoreOne WordPress plugin (versions up to 2.7.276) allows remote attackers to access confidential information without authentication. With a CVSS score of 7.5 (High), the flaw requires no user interaction and has high confidentiality impact (C:H) but no integrity or availability effect. No public exploit code or active exploitation has been identified at time of analysis, and the risk is confined to WordPress sites with this specific plugin installed.