cleantalk
Vulnerabilities and Security Researches

JetBackup – WP Backup, Migrate & Restore, CVE-2023-7165

CVE, Research URL

CVE-2023-7165

Published on
Feb 27, 2024
Research Description
The JetBackup WordPress plugin before 2.0.9.9 doesn't use index files to prevent public directory listing of sensitive directories in certain configurations, which allows malicious actors to leak backup files.
Affected versions
Min -, max 2.0.9.9.
Status
vulnerable