{"id":86047,"date":"2025-12-15T16:21:38","date_gmt":"2025-12-15T16:21:38","guid":{"rendered":""},"modified":"-0001-11-30T00:00:00","modified_gmt":"-0001-11-30T06:00:00","slug":"cve-2023-6113-unauthenticated-information-leakage-in-wp-staging-wordpress-backup-plugins","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2023-6113-unauthenticated-information-leakage-in-wp-staging-wordpress-backup-plugins\/","title":{"rendered":"CVE-2023-6113: Unauthenticated Information Leakage in WP STAGING WordPress Backup Plugins<\/strong>"},"content":{"rendered":"

Overview<\/strong><\/p>\n

This report details the CVE-2023-6113 vulnerability, a critical flaw affecting both the WP STAGING WordPress Backup Plugin prior to version 3.1.3 and the WP STAGING Pro WordPress Backup Plugin prior to version 5.1.3. The vulnerability allows unauthenticated attackers to gain access to key information about ongoing backup processes and to download these backups. This poses a significant threat to WordPress sites using these plugins, as it may lead to system compromise or data leakage.<\/p>\n

Vulnerability Summary<\/strong><\/p>\n

CVE ID: CVE-2023-6113
\nSeverity: High (7.5 on CVSS scale)
\nAttack Vector: Network
\nPrivileges Required: None
\nUser Interaction: None
\nImpact: Potential system compromise and data leakage<\/p>\n

Affected Products<\/strong><\/p>

\r\n

\r\n \r\n \"Ameeba\r\n <\/a>\r\n A new way to communicate\r\n <\/h2>\r\n\r\n

\r\n Ameeba Chat is built on encrypted identity, not personal profiles.\r\n <\/p>\r\n\r\n

\r\n Message, call, share files, and coordinate with identities kept separate.\r\n <\/p>\r\n\r\n