CVE-2023-6271: Backupbliss Backup Migration

High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days.

The Backup Migration WordPress plugin before 1.3.6 stores in-progress backups information in easy to find, publicly-accessible files, which may allow attackers monitoring those to leak sensitive information from the site's backups.

Affected products

• Backupbliss Backup Migration: before 1.3.6 (fixed in 1.3.6)

Published 2024-01-01. Last modified 2026-06-17.