CVE-2023-7232

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

The Backup and Restore WordPress WordPress plugin through 1.45 does not protect some log files containing sensitive information such as site configuration etc, allowing unauthenticated users to access such data

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected software

VendorProductVersions
UnknownBackup and Restore WordPress <= 1.45
wpbackitupwp_backitup<= 1.45

References

Timeline

Published
Mar 26, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2023

CVE-2023-72334.8The GigPress WordPress plugin through 2.3.29 does not sanitise and escape some of its settings, which could allow high privilege users such CVE-2023-72345.3OPCUAServerToolkit will write a log message once an OPC UA client has successfully connected containing the client's self-defined descriptioCVE-2023-72358.4The OpenVPN GUI installer before version 2.6.9 did not set the proper access control restrictions to the installation directory of OpenVPN bCVE-2023-72364.7The Backup Bolt WordPress plugin through 1.3.0 is vulnerable to Information Exposure via the unprotected access of debug logs. This makes itCVE-2023-72377.5Lantronix XPort sends weakly encoded credentials within web request headers.CVE-2023-72386.1A XSS payload can be uploaded as a DICOM study and when a user tries to view the infected study inside the Osimis WebViewer the XSS vulnerabCVE-2023-72397.5The WP Dashboard Notes WordPress plugin before 1.0.11 does not validate that the user has access to the post_id parameter in its wpdn_updateCVE-2023-72405.8An improper authorization level has been detected in the login panel. It may lead to unauthenticated Server Side Request Forgery and allows CVE-2023-72417.9Privilege Escalation in WRSA.EXE in Webroot Antivirus 8.0.1X- 9.0.35.12 on Windows64 bit and 32 bit allows malicious software to abuse WRSCVE-2023-72428.2Industrial Control Systems Network Protocol Parsers (ICSNPP) - Ethercat Zeek Plugin versions d78dda6 and prior are vulnerable to out-of-bouCVE-2023-72439.8Industrial Control Systems Network Protocol Parsers (ICSNPP) - Ethercat Zeek Plugin versions d78dda6 and prior are vulnerable to out-of-bouCVE-2023-72449.8Industrial Control Systems Network Protocol Parsers (ICSNPP) - Ethercat Zeek Plugin versions d78dda6 and prior are vulnerable to out-of-bou
CVE-2023-7232: Medium severity, CVSS 5.3 | Vulnix