Wp-staging Wp Staging — known CVE vulnerabilities

Every CVE whose affected-product data names Wp-staging Wp Staging, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2023-6113 — CVSS 7.5 (high): The WP STAGING WordPress Backup Plugin before 3.1.3 and WP STAGING Pro WordPress Backup Plugin before 5.1.3 do not prevent visitors from…
• CVE-2023-7204 — CVSS 7.5 (high): The WP STAGING WordPress Backup plugin before 3.2.0 allows access to cache files during the cloning process which provides
• CVE-2024-4469 — CVSS 7.5 (high): The WP STAGING WordPress Backup Plugin WordPress plugin before 3.5.0 does not prevent users with the administrator role from pinging…
• CVE-2024-5551 — CVSS 7.5 (high): The WP STAGING Pro WordPress Backup Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and…
• CVE-2022-2737 — CVSS 4.8 (medium): The WP STAGING WordPress plugin before 2.9.18 does not sanitise and escape some of its settings, which could allow high privilege users…
• CVE-2024-2309 — CVSS 4.8 (medium): The WP STAGING WordPress Backup Plugin WordPress plugin before 3.4.0, wp-staging-pro WordPress plugin before 5.4.0 does not sanitise and…