| Package | Affected versions | Patched versions |
|---|---|---|
| backupbuddy | = 1.3.4= 2.1.4= 2.2.25= 2.2.28= 2.2.4 |
importbuddy.php in the BackupBuddy plugin 1.3.4, 2.1.4, 2.2.25, 2.2.28, and 2.2.4 for WordPress does not reliably delete itself after completing a restore operation, which makes it easier for remote attackers to obtain access via subsequent requests to this script.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free