CVE-2024-0697: Backuply – Backup, Restore, Migrate and Clone <= 1.2.3 - Authenticated (Administrator+) Directory Traversal
The Backuply – Backup, Restore, Migrate and Clone plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.2.3 via the nodeid parameter in the backuplygetjstree function. This makes it possible for attackers with administrator privileges or higher to read the contents of arbitrary files on the server, which can contain sensitive information.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-0697?
CVE-2024-0697 has been assigned a severity score that reflects a high risk due to its potential for unauthorized file access.
How do I fix CVE-2024-0697?
To fix CVE-2024-0697, update the Backuply plugin to version 1.2.4 or later.
Who is affected by CVE-2024-0697?
CVE-2024-0697 affects all versions of the Backuply plugin for WordPress up to and including version 1.2.3.
What types of attacks can be executed due to CVE-2024-0697?
CVE-2024-0697 allows attackers with administrator privileges to exploit directory traversal to access sensitive files on the server.
When was CVE-2024-0697 published?
CVE-2024-0697 was published in early 2024, highlighting an important vulnerability for WordPress site administrators.