CVE-2023-7165: JetBackup < 2.0.9.9 - Directory Listing Exposing Backups
The JetBackup WordPress plugin before 2.0.9.9 doesn't use index files to prevent public directory listing of sensitive directories in certain configurations, which allows malicious actors to leak backup files.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-7165?
CVE-2023-7165 is considered a medium severity vulnerability due to the risk of unauthorized access to sensitive backup files.
How do I fix CVE-2023-7165?
To mitigate CVE-2023-7165, update the JetBackup WordPress plugin to version 2.0.9.9 or later.
What impact does CVE-2023-7165 have on my website?
CVE-2023-7165 can allow malicious actors to leak sensitive backup files, potentially exposing data and compromising site security.
What versions of JetBackup are affected by CVE-2023-7165?
CVE-2023-7165 affects all versions of the JetBackup plugin prior to 2.0.9.9.
How can I check if I am vulnerable to CVE-2023-7165?
You can check if you are vulnerable to CVE-2023-7165 by reviewing the version of the JetBackup plugin installed on your WordPress site.