Vulnerability · Published Dec 31, 2024 · Assigned by Patchstack
CVE-2024-56067WordPress WP SuperBackup plugin <= 2.3.3 - Unauthenticated Backup File Download Vulnerability
High 7.5
In plain English
A high-severity missing authorization in WP SuperBackup from azzaroco. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 11.7% (higher than 96% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)11.7%top 3.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack tooling1Public PoC
Official description
Missing Authorization vulnerability in azzaroco WP SuperBackup indeed-wp-superbackup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP SuperBackup: from n/a through <= 2.3.3.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| azzaroco | WP SuperBackup | 0 – through 2.3.3 |
Weakness: CWE-862 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N