CVE-2023-6750

Deeper analysis

The Clone WordPress plugin before version 2.4.3 contains an information disclosure vulnerability stemming from its use of buffer files to store in-progress backup data. These files are written to a statically defined path that remains publicly accessible over the network, allowing unauthenticated retrieval of their contents. The issue carries a CVSS 3.1 base score of 7.5, reflecting network attack vector, low complexity, and high confidentiality impact with no authentication or user interaction required.

An attacker can directly request the known file path to obtain sensitive backup information, including site data that may contain credentials, user details, or other confidential material. Because the exposure requires no privileges, any remote party with network access to the WordPress instance can exploit it and exfiltrate the stored backup contents.

The WPScan advisory for this issue recommends updating the Clone plugin to version 2.4.3 or later to eliminate the static public buffer path. The associated EPSS score reached a peak of 0.4835, indicating a material rise in exploitation interest after disclosure that warrants renewed attention.