cleantalk
Vulnerabilities and Security Researches

Backup Migration, CVE-2023-54346

CVE, Research URL

CVE-2023-54346

Home page URL

Security reports for Backup Migration

Application

Backup Migration

Published on
May 05, 2026
Research Description
WordPress Plugin Backup Migration 1.2.8 contains an information disclosure vulnerability that allows unauthenticated attackers to download complete database backups by accessing predictable file paths. Attackers can enumerate backup directories through configuration files and complete logs, then construct direct download URLs to retrieve sensitive backup archives containing full database dumps.
Affected versions
max 1.2.8.
Status
vulnerable
Previous vulnerability researches
Webinar Solution: Create live/evergreen/automated/instant webinars, stream & Zoom Meetings | WebinarIgnition (CVE-2025-60088) , Jan 10, 2026
Webinar Solution: Create live/evergreen/automated/instant webinars, stream & Zoom Meetings | WebinarIgnition (CVE-2023-51424) , Jun 07, 2024
Webinar Solution: Create live/evergreen/automated/instant webinars, stream & Zoom Meetings | WebinarIgnition (c2729e13130378a765783bf8e120f094aa2a7b8c) , Jun 07, 2024
Webinar Solution: Create live/evergreen/automated/instant webinars, stream & Zoom Meetings | WebinarIgnition (CVE-2023-25023) , Jun 07, 2024
Webinar Solution: Create live/evergreen/automated/instant webinars, stream & Zoom Meetings | WebinarIgnition (CVE-2023-51423) , Jun 07, 2024
New vulnerability
Webinar Solution: Create live/evergreen/automated/instant webinars, stream & Zoom Meetings | WebinarIgnition (CVE-2026-40797) , May 08, 2026
WP-Optimize – Cache, Compress images, Minify & Clean database to boost page speed & performance (CVE-2026-7252) , May 08, 2026
WordPress Gallery Plugin – NextGEN Gallery (CVE-2025-2537) , May 08, 2026
Backup Migration (CVE-2023-54346) , May 08, 2026
Forminator – Contact Form, Payment Form & Custom Form Builder (CVE-2026-6222) , May 07, 2026