Executive Summary

The vulnerability in the Backup Bolt plugin for WordPress allows authenticated users with Administrator-level access or higher to download files from directories outside the webroot and to write backup zip files to arbitrary locations on the server. This occurs through the process_backup_batch() function in versions up to and including 1.4.1.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can allow an attacker with Administrator-level access to download sensitive files from the server that are outside the webroot, potentially exposing confidential data. Additionally, the attacker can write backup zip files to arbitrary locations, which could be used to overwrite important files or place malicious files on the server, leading to data integrity issues or further exploitation.

Useful 0 Not Useful 0