Description
WordPress Plugin Simple Backup is prone to a vulnerability that lets attackers download arbitrary files because the application fails to sufficiently verify user-supplied input. This may allow an attacker to gain access to sensitive information, which may aid in launching further attacks. WordPress Plugin Simple Backup version 2.7.10 is vulnerable; other versions may also be affected.
Remediation
Update to plugin version 2.7.11 or latest
References
Related Vulnerabilities
Oracle JRE CVE-2020-2778 Vulnerability (CVE-2020-2778)
Serendipity Other Vulnerability (CVE-2005-1451)
WordPress Plugin Instagram Feed Unspecified Vulnerability (1.11.3)
WordPress Plugin Top 10-Popular posts for WordPress Multiple Vulnerabilities (3.2.3)
WordPress Plugin wp-FileManager Arbitrary File Disclosure (1.3.0)