7.5
High
CVE-2024-4469 The WP STAGING WordPress Backup Plugin WordPress plugin before 3.5.0 does not prevent users with the administrator role…
Description
The WP STAGING WordPress Backup Plugin WordPress plugin before 3.5.0 does not prevent users with the administrator role from pinging conducting SSRF attacks, which may be a problem in multisite configurations.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WP STAGING WordPress Backup Plugin 3.5 | earliest → < 3.5.0 | 3.5.0 |
Other CVEs of WP STAGING WordPress Backup Plugin
The 4 CVEs of WP STAGING WordPress Backup Plugin →
CVE-2024-2309
The WP STAGING WordPress Backup Plugin WordPress plugin before 3.4.0, wp-staging-pro WordPress plugin before 5.4.0 does…
4.8
Medium
CVE-2023-7204
The WP STAGING WordPress Backup plugin before 3.2.0 allows access to cache files during the cloning process which…
7.5
High
CVE-2023-6113
The WP STAGING WordPress Backup Plugin before 3.1.3 and WP STAGING Pro WordPress Backup Plugin before 5.1.3 do not…
7.5
High