CVE-2023-33928

Summary

CVE-2023-33928 is a new vulnerability affecting the WebToffee WordPress Backup & Migration plugin. This missing authorization issue enables unauthorized access, allowing attackers to exploit incorrectly configured access control security levels. The vulnerability can be exploited on versions of the plugin from n/a through 1.4.0 of WebToffee WordPress Backup & Migration. This security flaw poses a significant risk to websites using the affected plugin and underscores the importance of maintaining up-to-date software to mitigate potential cyber threats.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.