VULNERABILITY INTELLIGENCE

CVE-2023-7165

CVSS score7.5 HIGH

EPSS probability1.90%

CISA KEVNot currently listed

Published2024-02-27

Last modified2026-06-17

Description

The JetBackup WordPress plugin before 2.0.9.9 doesn't use index files to prevent public directory listing of sensitive directories in certain configurations, which allows malicious actors to leak backup files.