CVE-2023-6271

The Backup Migration WordPress plugin before 1.3.6 stores in-progress backups information in easy to find, publicly-accessible files, which may allow attackers monitoring those to leak sensitive information from the site's backups.

• https://research.cleantalk.org/cve-2023-6271-backup-migration-unauth-sensitive-data-exposure-to-full-control-of-the-site-poc-exploitExploit, Third Party Advisory
• https://wpscan.com/vulnerability/7ac217db-f332-404b-a265-6dc86fe747b9Exploit, Third Party Advisory
• https://research.cleantalk.org/cve-2023-6271-backup-migration-unauth-sensitive-data-exposure-to-full-control-of-the-site-poc-exploitExploit, Third Party Advisory
• https://wpscan.com/vulnerability/7ac217db-f332-404b-a265-6dc86fe747b9Exploit, Third Party Advisory

Published

Jan 1, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-6265** UNSUPPORTED WHEN ASSIGNED ** Draytek Vigor2960 v1.5.1.4 a…8.1
• CVE-2023-6266The Backup Migration plugin for WordPress is vulnerable to u…7.5
• CVE-2023-6267A flaw was found in the json payload. If annotation based se…9.8
• CVE-2023-6268The JSON Content Importer WordPress plugin before 1.5.4 does…6.1
• CVE-2023-6269An argument injection vulnerability has been identified in t…9.8
• CVE-2023-6270A flaw was found in the ATA over Ethernet (AoE) driver in th…7
• CVE-2023-6272The Theme My Login 2FA WordPress plugin before 1.2 does not …9.8
• CVE-2023-6273Permission management vulnerability in the module for disabl…5.3
• CVE-2023-6274A vulnerability was found in Byzoro Smart S80 up to 20231108…9.8
• CVE-2023-6275A vulnerability was found in TOTVS Fluig Platform 1.6.x/1.7.…6.1
• CVE-2023-6276A vulnerability classified as critical has been found in Ton…7.5
• CVE-2023-6277An out-of-memory flaw was found in libtiff. Passing a crafte…6.5