CVE-2024-13911

HIGH

Database Backup <2.35 - Info Disclosure

Title source: llm
STIX 2.1

Description

The Database Backup and check Tables Automated With Scheduler 2024 plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.35 via the /dashboard/backup.php file. This makes it possible for authenticated attackers, with Administrator-level access and above, to extract sensitive data including full database credentials.

References (7)

Core 7

Scores

CVSS v3 7.2
EPSS 0.0054
EPSS Percentile 41.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-200
Status published
Products (2)
sminozzi/Database Backup and check Tables Automated With Scheduler 2024 < 2.35
sminozzi/Database Backup and Table Integrity Check with Automated Scheduling < 2.35
Published Mar 01, 2025
Tracked Since Feb 18, 2026