CVE-2024-31254

概要

参考情報

• patchstack.com/database/vulnerability/wp-migration-duplicator/wordpress-wordpress-backup-migration-plugin-1-4-7-sensitive-data-exposure-via-log-file-vulnerability · Third Party Advisory

backup and migration のその他の脆弱性

• CVE-2023-5738中 5.4The WordPress Backup & Migration WordPress plugin before 1.4.4 does not sanitise and escape some parameters, which could allow users with a …
• CVE-2023-5737中 4.3The WordPress Backup & Migration WordPress plugin before 1.4.4 does not authorize some AJAX requests, allowing users with a role as low as S…