CVE

CVE-2024-13609

5.9

CVSSmedium

Exploitable remotely over the internet · no authentication required.

Description

The 1 Click WordPress Migration Plugin – 100% FREE for a limited time plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.2 via the class-ocm-backup.php. This makes it possible for unauthenticated attackers to extract sensitive data including usernames and their respective password hashes during a short window of time in which the backup is in process.

Attack Vector

Network

Privileges Req.

None

User Interaction

None

1 click migration & backup: free wordpress migration plugin with zero downtime & easy clone

Updated Sep 18, 2026View on NVD →

S4E scanner

mediumProduct Based Web Vulnerabilities~1 minutes

CVE-2024-13609 Scanner

CVE-2024-13609 Scanner - Information Disclosure vulnerability in WordPress 1 Click Migration Plugin

Used 2.5k times · 5.9k assets checked · url

Scanner page →Run scanner

CVE history: 1 click migration & backup: free wordpress migration plugin with zero downtime & easy clone

Predict next CVE date with AI

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →