High severity7.5NVD Advisory· Published Jan 1, 2024· Updated Jun 17, 2026

CVE-2023-6113

Description

The WP STAGING WordPress Backup Plugin before 3.1.3 and WP STAGING Pro WordPress Backup Plugin before 5.1.3 do not prevent visitors from leaking key information about ongoing backups processes, allowing unauthenticated attackers to download said backups later.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Wp Staginginferred
Range: <5.1.3
Package: https://wordpress.org/plugins/wp-staging
WordPress/WP STAGING Backup Pluginllm-create
Range: <3.1.3
WordPress/WP STAGING WordPress Backup Pluginllm-fuzzy
Range: <5.1.3

Patches

Vulnerability mechanics

References

research.cleantalk.org/cve-2023-6113-wp-staging-unauth-sensitive-data-exposure-to-account-takeover-poc-exploit/nvdExploitThird Party Advisory
wpscan.com/vulnerability/5a71049a-09a6-40ab-a4e8-44634869d4fbnvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000