5.9
Medium
CVE-2025-24651 Insertion of Sensitive Information into Log File vulnerability in WebToffee WordPress Backup & Migration…
Description
Insertion of Sensitive Information into Log File vulnerability in WebToffee WordPress Backup & Migration wp-migration-duplicator allows Retrieve Embedded Sensitive Data.This issue affects WordPress Backup & Migration: from n/a through <= 1.5.3.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WordPress Backup & Migration 1.5 | earliest → 1.5.3 | No fix stated |
Other CVEs of WordPress Backup & Migration
The 7 CVEs of WordPress Backup & Migration →
CVE-2026-97197
Unauthenticated Broken Access Control in WordPress Backup & Migration <= 1.6.0 versions
7.5
High
CVE-2023-45636
Missing Authorization vulnerability in WebToffee WordPress Backup & Migration wp-migration-duplicator allows…
5.4
Medium
CVE-2023-33928
Missing Authorization vulnerability in WebToffee WordPress Backup & Migration allows Exploiting Incorrectly Configured…
4.3
Medium
CVE-2023-52183
Missing Authorization vulnerability in WebToffee WordPress Backup & Migration.This issue affects WordPress Backup &…
5.4
Medium