{"id":86047,"date":"2025-12-15T16:21:38","date_gmt":"2025-12-15T16:21:38","guid":{"rendered":""},"modified":"-0001-11-30T00:00:00","modified_gmt":"-0001-11-30T06:00:00","slug":"cve-2023-6113-unauthenticated-information-leakage-in-wp-staging-wordpress-backup-plugins","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2023-6113-unauthenticated-information-leakage-in-wp-staging-wordpress-backup-plugins\/","title":{"rendered":"CVE-2023-6113: Unauthenticated Information Leakage in WP STAGING WordPress Backup Plugins<\/strong>"},"content":{"rendered":"

Overview<\/strong><\/p>\n

This report details the CVE-2023-6113 vulnerability, a critical flaw affecting both the WP STAGING WordPress Backup Plugin prior to version 3.1.3 and the WP STAGING Pro WordPress Backup Plugin prior to version 5.1.3. The vulnerability allows unauthenticated attackers to gain access to key information about ongoing backup processes and to download these backups. This poses a significant threat to WordPress sites using these plugins, as it may lead to system compromise or data leakage.<\/p>\n

Vulnerability Summary<\/strong><\/p>\n

CVE ID: CVE-2023-6113
\nSeverity: High (7.5 on CVSS scale)
\nAttack Vector: Network
\nPrivileges Required: None
\nUser Interaction: None
\nImpact: Potential system compromise and data leakage<\/p>\n

Affected Products<\/strong><\/p>

\r\n

\r\n \r\n \"Ameeba\r\n <\/a>\r\n Share secrets securely\r\n <\/h2>\r\n\r\n

\r\n Ameeba is private infrastructure for communication and sensitive work built on encrypted identity instead of exposed corporate identity systems.\r\n <\/p>\r\n\r\n

\r\n Passwords, credentials, confidential files, screenshots, internal discussions, sensitive AI context, and private coordination should not become exposed across ordinary communication platforms.\r\n <\/p>\r\n\r\n