Skip to content
Sign in
7.5 High

CVE-2023-7165 The JetBackup WordPress plugin before 2.0.9.9 doesn't use index files to prevent public directory listing of sensitive…

Description

The JetBackup WordPress plugin before 2.0.9.9 doesn't use index files to prevent public directory listing of sensitive directories in certain configurations, which allows malicious actors to leak backup files.

Affected products and versions

Product Affected versions Fixed in
JetBackup 2.0 earliest → < 2.0.9.9 2.0.9.9
jetbackup 2.0 earliest → < 2.0.9.9 2.0.9.9

Other CVEs of JetBackup

The 3 CVEs of JetBackup →
CVE-2026-19453 The JetBackup WordPress plugin before 3.1.23.5 does not verify the role or capabilities of the account it preserves… 7.1 High CVE-2026-19454 The JetBackup WordPress plugin before 3.1.23.5 does not perform its multisite authorisation check before serving backup… 4.4 Medium
Track this CVE