{"id":3585,"date":"2024-04-22T16:45:10","date_gmt":"2024-04-22T16:45:10","guid":{"rendered":"http:\/\/127.0.0.1\/wordpress-backup-migration-1-4-8-falta-de-autorizacion-para-traversal-de-directorios\/"},"modified":"2024-04-22T16:45:10","modified_gmt":"2024-04-22T16:45:10","slug":"wordpress-backup-migration-1-4-8-falta-de-autorizacion-para-traversal-de-directorios","status":"publish","type":"post","link":"http:\/\/127.0.0.1\/wordpress-backup-migration-1-4-8-falta-de-autorizacion-para-traversal-de-directorios\/","title":{"rendered":"WordPress Backup & Migration <= 1.4.8 – Falta de Autorizaci\u00f3n para Traversal de Directorios"},"content":{"rendered":"
<\/p>\n
El plugin WordPress Backup & Migration para WordPress es vulnerable a acceso no autorizado de datos debido a la falta de una verificaci\u00f3n de capacidad en la funci\u00f3n wp_mgdp_populate_popup en todas las versiones hasta, e incluyendo, la 1.4.8. Esto permite a atacantes autenticados, con acceso de suscriptor o superior, invocar esta funci\u00f3n y acceder a […]<\/p>\n","protected":false},"author":0,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[1295],"class_list":["post-3585","post","type-post","status-publish","format-standard","hentry","category-uncategorized","tag-cve-2024-3546"],"yoast_head":"\n