CVE-2024-3546
First published: Thu May 02 2024(Updated: )
The WordPress Backup & Migration plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the wp_mgdp_populate_popup function in all versions up to, and including, 1.4.8. This makes it possible for authenticated attackers, with subscriber access or above, to invoke this function and access log files maintained by the plugin. Additionally, the file name is user-provided and not properly sanitized, which allows attackers to read arbitrary log files on the file system.
Credit: security@wordfence.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| WPvivid Backup and Migration | <=1.4.8 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-3546?
CVE-2024-3546 is considered a medium severity vulnerability due to the potential for unauthorized access to data.
How do I fix CVE-2024-3546?
To fix CVE-2024-3546, update the WordPress Backup & Migration plugin to version 1.4.9 or later.
Who is affected by CVE-2024-3546?
CVE-2024-3546 affects all versions of the WordPress Backup & Migration plugin up to and including 1.4.8.
What kind of attacks can exploit CVE-2024-3546?
CVE-2024-3546 can be exploited by authenticated attackers with subscriber access or above.
What specific function is vulnerable in CVE-2024-3546?
The vulnerable function in CVE-2024-3546 is the wp_mgdp_populate_popup function, which lacks a capability check.
- agent/weakness
- agent/references
- agent/description
- agent/type
- agent/first-publish-date
- agent/severity
- agent/author
- agent/event
- collector/epss-latest
- source/FIRST
- agent/epss
- collector/mitre-cve
- source/MITRE
- collector/nvd-api
- source/NVD
- agent/last-modified-date
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/wordpress
- canonical/wpvivid backup and migration