CVE-2022-2863

The Migration, Backup, Staging WordPress plugin before 0.9.76 does not sanitise and validate a parameter before using it to read the content of a file, allowing high privilege users to read any file from the web server via a Traversal attack

Affected products

Migration

Wpvivid Migration\, Backup\, Staging

< 0.9.76

Fix

Available

CVSS 3.1

4.9 MEDIUM

EPSS

20.7% (97th percentile)

Weakness

CWE-22

NVD status

Modified

Published

2022-09-16