{"id":86891,"date":"2026-04-07T13:19:39","date_gmt":"2026-04-07T13:19:39","guid":{"rendered":""},"modified":"-0001-11-30T00:00:00","modified_gmt":"-0001-11-30T00:00:00","slug":"cve-2024-13807-sensitive-information-exposure-in-xagio-seo-plugin-for-wordpress","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2024-13807-sensitive-information-exposure-in-xagio-seo-plugin-for-wordpress\/","title":{"rendered":"CVE-2024-13807: Sensitive Information Exposure in Xagio SEO Plugin for WordPress<\/strong>"},"content":{"rendered":"

Overview<\/strong><\/p>\n

This report provides an overview of the identified vulnerability CVE-2024-13807, affecting the Xagio SEO plugin for WordPress up to version 7.1.0.5. This vulnerability is a major concern as it exposes sensitive information, allowing unauthenticated attackers to extract crucial data from backups, which can include the entire database and site’s files. This can lead to system compromise and data leakage, posing a significant risk to website owners and users.<\/p>\n

Vulnerability Summary<\/strong><\/p>\n

CVE ID: CVE-2024-13807
\nSeverity: High (CVSS: 7.5)
\nAttack Vector: Network
\nPrivileges Required: None
\nUser Interaction: None
\nImpact: System compromise, Data Leakage<\/p>\n

Affected Products<\/strong><\/p>\n

Product | Affected Versions<\/p>\n

Xagio SEO Plugin for WordPress | Up to and including 7.1.0.5<\/p>\n

How the Exploit Works<\/strong><\/p>\n

The vulnerability resides in the backup functionality of the Xagio SEO plugin. The plugin uses a weak filename structure and does not adequately protect the directory, making it easier for attackers to identify backup files. An unauthenticated attacker can exploit this vulnerability by accessing these backup files directly over the network. The extracted backup files can contain sensitive data such as the site’s entire database and files.<\/p>\n

Conceptual Example Code<\/strong><\/p>\n

The following conceptual example demonstrates how an attacker might exploit this vulnerability. They could send a simple HTTP GET request to the backup file’s path, given the predictable filename structure:<\/p>\n

GET \/wp-content\/plugins\/xagio-seo\/backups\/db_backup_2024_07_07.sql HTTP\/1.1\nHost: target.example.com<\/code><\/pre>\n
Upon successful execution, the server would return the content of the backup file, revealing potentially sensitive data.<\/p>\n","protected":false},"excerpt":{"rendered":"
Overview This report provides an overview of the identified vulnerability CVE-2024-13807, affecting the Xagio SEO plugin for WordPress up to version 7.1.0.5. This vulnerability is a major concern as it exposes sensitive information, allowing unauthenticated attackers to extract crucial data from backups, which can include the entire database and site’s files. This can lead to […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"footnotes":""},"categories":[],"tags":[],"vendor":[],"product":[],"attack_vector":[],"asset_type":[],"severity":[],"exploit_status":[],"class_list":["post-86891","post","type-post","status-publish","format-standard","hentry"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t