Description

WordPress Plugin myEASYbackup is prone to a directory traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue can allow an attacker to obtain sensitive information that could aid in further attacks. WordPress Plugin myEASYbackup version 1.0.8.1 is vulnerable; other versions may also be affected.

Remediation

Update to plugin version 1.0.9 or latest

References

http://packetstormsecurity.com/files/108711/wpmyeasybackup-traversal.txt

Related Vulnerabilities

WordPress Plugin Contact Form 7-Clockwork SMS Cross-Site Scripting (2.3.0)

WordPress Plugin Lingotek Translation Multiple Cross-Site Scripting Vulnerabilities (1.1.8)

WordPress Plugin WPS Cleaner Multiple Cross-Site Request Forgery Vulnerabilities (1.4.4)

WordPress Plugin Welcart e-Commerce Cross-Site Scripting and Cross-Site Request Forgery Vulnerabilities (1.2.1)

WordPress Plugin MailUp newsletter sign-up form Security Bypass (1.3.2)

Severity

High

Classification

CVE-2012-0898 CWE-22 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Tags

Missing Update Directory Traversal