CVE-2016-20076
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk44th percentile - higher than 44% of all known CVEs
Summary
WordPress Simple-Backup version 2.7.11 contains multiple vulnerabilities that allow unauthenticated attackers to delete arbitrary files and download sensitive files by manipulating the delete_backup_file and download_backup_file parameters in tools.php.
Risk Assessment
Attackers can exploit insufficient input validation to access configuration files and database dumps, potentially leading to the exposure of sensitive information or deletion of critical files.
Recommendation
It is recommended to update the Simple-Backup plugin to the latest version and implement appropriate security measures to restrict access to critical system files.
Original NVD description (English source)
WordPress Simple-Backup 2.7.11 contains multiple vulnerabilities that allow unauthenticated attackers to delete arbitrary files and download sensitive files by manipulating the delete_backup_file and download_backup_file parameters in tools.php. Attackers can exploit insufficient input validation using directory traversal techniques to access wp-config.php, database dumps, and other sensitive files, or delete critical files .htaccess to expose backup directories.