CVE-2023-6266 Scanner
CVE-2023-6266 Scanner - Path Traversal vulnerability in WordPress Backup Migration
Used 3k times · 4.2k assets checked · domain, subdomain, ipv4
CVE
CVE-2023-6266
7.5
CVSShigh
Exploitable remotely over the internet · no authentication required.
Description
The Backup Migration plugin for WordPress is vulnerable to unauthorized access of data due to insufficient path and file validation on the BMI_BACKUP case of the handle_downloading function in all versions up to, and including, 1.3.6. This makes it possible for unauthenticated attackers to download back-up files which can contain sensitive information such as user passwords, PII, database credentials, and much more.
Attack Vector
Network
Privileges Req.
None
User Interaction
None
backupbliss – backup & migration with free cloud storage
Updated Nov 7, 2026View on NVD →
S4E scanner
CVE history: backupbliss – backup & migration with free cloud storage
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →