Wxd Backup Lite
Monthly
Unauthenticated remote attackers can access backup data from WordPress sites running the WXD Backup Lite plugin versions 1.0.2 and earlier due to a missing authorization check (CWE-862). The flaw carries a CVSS 3.1 base score of 7.5 (HIGH) with high confidentiality impact only, and exploitation requires no authentication or user interaction. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in CISA KEV; however, the low-complexity nature and unauthenticated access make it a significant risk for affected sites.
Unauthenticated remote attackers can access backup data from WordPress sites running the WXD Backup Lite plugin versions 1.0.2 and earlier due to a missing authorization check (CWE-862). The flaw carries a CVSS 3.1 base score of 7.5 (HIGH) with high confidentiality impact only, and exploitation requires no authentication or user interaction. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in CISA KEV; however, the low-complexity nature and unauthenticated access make it a significant risk for affected sites.