WebToffee WordPress Backup and Migration Sensitive Data Exposure Vulnerability

A vulnerability allowing the exposure of sensitive information has been identified in the WebToffee WordPress Backup & Migration plugin, affecting versions through 1.5.3. This issue arises from the improper handling of sensitive data, which can be retrieved from log files, potentially leading to unauthorized access to information not typically available to regular users.

Impact

Exploitation of this vulnerability could allow unauthorized users to access sensitive information, which could be used to exploit other weaknesses within the system.

Remediation

Users of the WebToffee WordPress Backup & Migration plugin are advised to update to version 1.5.4 or later to address this vulnerability.