CVE-2022-4931
Published: 07 March 2023
Summary
CVE-2022-4931 is a medium-severity an unspecified weakness vulnerability in Xibodevelopment Backupwordpress. Its CVSS base score is 4.3 (Medium).
Operationally, ranked at the 34.4th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2022-52185
Vulnerability details
The BackupWordPress plugin for WordPress is vulnerable to information disclosure in versions up to, and including 3.12. This is due to missing authorization on the heartbeat_received() function that triggers on WordPress heartbeat. This makes it possible for authenticated attackers, with…
more
subscriber-level permissions and above to retrieve back-up paths that can subsequently be used to download the back-up.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.