Snapshotify 8211 All In One Backup Amp Restore Amp Migrate
Monthly
Unauthenticated sensitive data exposure in the Snapshotify - All-in-One Backup & Restore & Migrate WordPress plugin (versions 1.3.2 and earlier) allows remote attackers to retrieve information the plugin transmits without adequate protection, yielding a high confidentiality impact with no integrity or availability impact. The flaw is remotely reachable, requires no authentication and no user interaction (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, base 7.5), and is rooted in CWE-201, the insertion of sensitive information into sent data. Exposure is limited to WordPress sites that have this specific backup/restore/migrate plugin installed and active; no public exploit identified at time of analysis, and no EPSS, KEV or proof-of-concept data was provided with the source material.
Unauthenticated sensitive data exposure in the Snapshotify - All-in-One Backup & Restore & Migrate WordPress plugin (versions 1.3.2 and earlier) allows remote attackers to retrieve information the plugin transmits without adequate protection, yielding a high confidentiality impact with no integrity or availability impact. The flaw is remotely reachable, requires no authentication and no user interaction (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, base 7.5), and is rooted in CWE-201, the insertion of sensitive information into sent data. Exposure is limited to WordPress sites that have this specific backup/restore/migrate plugin installed and active; no public exploit identified at time of analysis, and no EPSS, KEV or proof-of-concept data was provided with the source material.