CVE-2023-7204
Wp-Staging Wp Staging ≤ 3.2.0
Raw vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NCVSS and EPSS are reproduced from their sources (NVD, FIRST EPSS). Risk Priority is our own derived reading, not an NVD score.
Summary
CVE-2023-7204 is a high-severity Exposure of Resource to Wrong Sphere (CWE-668) vulnerability in Wp-Staging Wp Staging. Its CVSS base score is 7.5 (High).
Operationally, ranked at the 50th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
The strongest mitigations our analysis identified map to AC-3 (Access Enforcement) and AC-4 (Information Flow Enforcement) — see the control section below for these in your framework.
OWASP Top 10 for Web (2025)
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2023-59385
Vulnerability Data
The WP STAGING WordPress Backup plugin before 3.2.0 allows access to cache files during the cloning process which provides
- CWE(s)
Related Threats
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Access enforcement directly stops resources from being reachable by actors outside the intended control sphere.
Information flow enforcement structurally prevents unintended cross-sphere data or resource exposure.
Least privilege reduces the set of actors that can reach a resource, limiting wrong-sphere exposure.
Security attributes enable correct sphere assignment and subsequent enforcement decisions.
Boundary protection at interfaces prevents resources from being exposed outside authorized spheres.
Hardening callouts derived
DISA STIG baselines are authored against specific weaknesses. Where this CVE cites a broad weakness class, the mapping is not asserted at that abstraction (owner ruling, 2026-09-25: grade only at Base and below), so no rule is shown here rather than a rule shown against the wrong grain.