CVE-2024-3546: WordPress Backup & Migration <= 1.4.8 - Missing Authorization to Directory Traversal
The WordPress Backup & Migration plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the wpmgdppopulatepopup function in all versions up to, and including, 1.4.8. This makes it possible for authenticated attackers, with subscriber access or above, to invoke this function and access log files maintained by the plugin. Additionally, the file name is user-provided and not properly sanitized, which allows attackers to read arbitrary log files on the file system.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-3546?
CVE-2024-3546 is considered a medium severity vulnerability due to the potential for unauthorized access to data.
How do I fix CVE-2024-3546?
To fix CVE-2024-3546, update the WordPress Backup & Migration plugin to version 1.4.9 or later.
Who is affected by CVE-2024-3546?
CVE-2024-3546 affects all versions of the WordPress Backup & Migration plugin up to and including 1.4.8.
What kind of attacks can exploit CVE-2024-3546?
CVE-2024-3546 can be exploited by authenticated attackers with subscriber access or above.
What specific function is vulnerable in CVE-2024-3546?
The vulnerable function in CVE-2024-3546 is the wp_mgdp_populate_popup function, which lacks a capability check.