WordPress Keep Backup Daily Path Traversal Vulnerability Allowing Arbitrary File Download

A path traversal vulnerability has been identified in the WordPress plugin Keep Backup Daily, affecting versions through 2.1.0. This vulnerability allows for arbitrary file download, enabling a malicious actor to download any file from the website, including sensitive files such as login credentials or backup files.

Impact

Exploitation of this vulnerability could lead to arbitrary file download, allowing access to sensitive files on the server.

Remediation

Users of the Keep Backup Daily WordPress plugin should update to version 2.1.1 or later to address this vulnerability.