Medium severity4.9NVD Advisory· Published Dec 24, 2024· Updated Jun 17, 2026

CVE-2024-12850

Description

The Database Backup and check Tables Automated With Scheduler 2024 plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.32 via the database_backup_ajax_download() function. This makes it possible for authenticated attackers, with administrator-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Database Backupinferred
Range: <=2.32
Package: https://wordpress.org/plugins/database-backup
WordPress/Database Backup and check Tables Automated With Schedulerllm-fuzzy
Range: <=2.32

Patches

Vulnerability mechanics

References

plugins.svn.wordpress.org/database-backup/tags/2.32/functions/download.phpnvd
plugins.trac.wordpress.org/changeset/3212315/database-backup/trunk/functions/download.phpnvd
www.wordfence.com/threat-intel/vulnerabilities/id/b972626c-6374-4084-a0e1-1ea4a3062228nvd

News mentions

No linked articles in our index yet.

cvss	0.319
epss	0.001
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000