Design/Logic Flaw

2024-02-0905:15:00

PRIOn knowledge base

www.prio-n.com

backuply

wordpress

denial of service

vulnerable

direct file access

7.3 High

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

17.0%

JSON

The Backuply – Backup, Restore, Migrate and Clone plugin for WordPress is vulnerable to Denial of Service in all versions up to, and including, 1.2.5. This is due to direct access of the backuply/restore_ins.php file and. This makes it possible for unauthenticated attackers to make excessive requests that result in the server running out of resources.