7.5
High
CVE-2024-7315 The Migration, Backup, Staging WordPress plugin before 0.9.106 does not use sufficient randomness in the filename…
Description
The Migration, Backup, Staging WordPress plugin before 0.9.106 does not use sufficient randomness in the filename that is created when generating a backup, which could be bruteforced by attackers to leak sensitive information about said backups.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Migration, Backup, Staging 0.9 | 0.9.103 → < 0.9.106 | 0.9.106 |
| migration_backup_staging 0.9 | earliest → < 0.9.106 | 0.9.106 |