CVE-2024-13911

Name of the Vulnerable Software and Affected Versions Database Backup and check Tables Automated With Scheduler 2024 plugin for WordPress versions up to and including 2.35

Description The issue allows authenticated attackers with Administrator-level access and above to extract sensitive data, including full database credentials, via the "dashboard/backup.php" file.

Recommendations For versions up to and including 2.35, consider restricting access to the /dashboard/backup.php file until a patch is available. As a temporary workaround, limit Administrator-level access to minimize the risk of exploitation.