Web Plura Backup Amp Restore Manager
Monthly
Unauthenticated sensitive data exposure in the Web Plura Backup & Restore Manager plugin for WordPress (versions 0.2.25 and earlier) allows remote attackers to read potentially sensitive backup-related information from affected sites. Exploitation requires only that the plugin is installed and active, per the CVSS vector (AV:N/AC:L/PR:N/UI:N) confirming remote, low-complexity, unauthenticated access with no user interaction; impact is limited to confidentiality (C:H/I:N/A:N). No public exploit identified at time of analysis, and the affected install base is limited to sites running this specific low-footprint plugin.
Unauthenticated sensitive data exposure in the Web Plura Backup & Restore Manager plugin for WordPress (versions 0.2.25 and earlier) allows remote attackers to read potentially sensitive backup-related information from affected sites. Exploitation requires only that the plugin is installed and active, per the CVSS vector (AV:N/AC:L/PR:N/UI:N) confirming remote, low-complexity, unauthenticated access with no user interaction; impact is limited to confidentiality (C:H/I:N/A:N). No public exploit identified at time of analysis, and the affected install base is limited to sites running this specific low-footprint plugin.