← Back

CVE-2020-36848

nvd nist
Published: Jul 12, 2025Modified: Jul 29, 2025

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 3.9 / Impact: 3.6
Source: security@wordfence.com (Secondary)

Description

The Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.14.9 via the env-info.php and restore-info.json files. This makes it possible for unauthenticated attackers to find the location of back-up files and subsequently download them.

Affected (1)

Boldgrid
1 product
Total Upkeep
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Total Upkeep
Before 1.14.10

Related CWEs

CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (4)

Source: security@wordfence.com
Patch
Source: security@wordfence.com
Exploit
Source: security@wordfence.com
ExploitThird Party Advisory
Source: security@wordfence.com
Third Party Advisory

Timeline

No history available yet.