CVE-2024-0842
EUVD-2024-1662509.02.2024, 05:15
The Backuply – Backup, Restore, Migrate and Clone plugin for WordPress is vulnerable to Denial of Service in all versions up to, and including, 1.2.6. This is due to direct access of the backuply/restore_ins.php file and. This makes it possible for unauthenticated attackers to make excessive requests that result in the server running out of resources.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| softaculous | backuply | 𝑥 < 1.2.6 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| softaculous | backuply | 𝑥 ≤ 1.2.5 | ADP |
Common Weakness Enumeration
- CWE-400 - Uncontrolled Resource ConsumptionThe software does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.
- CWE-834 - Excessive IterationThe software performs an iteration or loop without sufficiently limiting the number of times that the loop is executed.
References