CVE-2023-3132 — MainWP Child <= 4.4.1.1 - Information Disclosure via Back-Up Files
The MainWP Child plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 4.4.1.1 due to insufficient controls on the storage of ba…
Published: 2023-06-27 · CVSS: 5.9 · CVSS 3.1
The MainWP Child plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 4.4.1.1 due to insufficient controls on the storage of back-up files. This makes it possible for unauthenticated attackers to extract sensitive data including the entire installations database if a backup occurs and the deletion of the back-up files fail.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7