wp-staging records
6 published records for vendor wp-staging.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 66.7%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-668 Exposure of Resource to Wrong Sphere1
- CWE-918 Server-Side Request Forgery (SSRF)1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
6 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
35Monitor | CVE-2024-5551No exploit | WP STAGING PRO - Backup Duplicator & Migration <= 5.6.0 - Cross-Site Request Forgery to Limited Local File Inclusionwp-staging · wp staging · CWE-352 | High8.8 | — | 0.2% | Jun 14, 2024 |
30Monitor | CVE-2023-6113No exploit | WP Staging (Free < 3.1.3, Pro < 5.1.3) - Unauthenticated Backup Downloadwp-staging · wp staging · CWE-200 | High7.5 | — | 0.7% | Jan 1, 2024 |
30Monitor | CVE-2023-7204No exploit | WP STAGING WordPress Backup Plugin < 3.2.0 - Unauthorized Sensitive Data Exposurewp-staging · wp staging · CWE-668 | High7.5 | — | 0.6% | Jan 29, 2024 |
30Monitor | CVE-2024-4469No exploit | Migration Backup Restore < 3.5.0 - Admin+ SSRFwp-staging · wp staging · CWE-918 | High7.5 | — | 0.5% | May 31, 2024 |
19Monitor | CVE-2022-2737No exploit | WP STAGING < 2.9.18 - Admin+ Stored Cross-Site Scriptingwp-staging · wp staging · CWE-79 | Medium4.8 | — | 0.6% | Sep 16, 2022 |
19Monitor | CVE-2024-2309No exploit | WP Staging < 3.4.0, 5.4.0 (Pro Version) - Admin+ Stored XSSwp-staging · wp staging · CWE-79 | Medium4.8 | — | 0.4% | Apr 17, 2024 |
- CVE-2024-555135Monitor
WP STAGING PRO - Backup Duplicator & Migration <= 5.6.0 - Cross-Site Request Forgery to Limited Local File Inclusion
HighCVSS 8.8No exploitEPSS 0%wp-staging · wp stagingJun 14, 2024
- CVE-2023-611330Monitor
WP Staging (Free < 3.1.3, Pro < 5.1.3) - Unauthenticated Backup Download
HighCVSS 7.5No exploitEPSS 0%wp-staging · wp stagingJan 1, 2024
- CVE-2023-720430Monitor
WP STAGING WordPress Backup Plugin < 3.2.0 - Unauthorized Sensitive Data Exposure
HighCVSS 7.5No exploitEPSS 0%wp-staging · wp stagingJan 29, 2024
- CVE-2024-446930Monitor
Migration Backup Restore < 3.5.0 - Admin+ SSRF
HighCVSS 7.5No exploitEPSS 0%wp-staging · wp stagingMay 31, 2024
- CVE-2022-273719Monitor
WP STAGING < 2.9.18 - Admin+ Stored Cross-Site Scripting
MediumCVSS 4.8No exploitEPSS 0%wp-staging · wp stagingSep 16, 2022
- CVE-2024-230919Monitor
WP Staging < 3.4.0, 5.4.0 (Pro Version) - Admin+ Stored XSS
MediumCVSS 4.8No exploitEPSS 0%wp-staging · wp stagingApr 17, 2024