CVE-2024-7315

PoC —

CVSS 3.1

7.5 high

EPSS

<1%p46

Published

Oct 2, 2024 (Oct 2, 2024)

Modified

Jun 17, 2026

Description

The Migration, Backup, Staging WordPress plugin before 0.9.106 does not use sufficient randomness in the filename that is created when generating a backup, which could be bruteforced by attackers to leak sensitive information about said backups.

Vendors: wpvivid
Products: migration\, backup\, staging
Ecosystems: WordPress
Weakness: CWE-338
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.