WP Staging Pro WordPress Backup Plugin Information Exposure Vulnerability

A vulnerability allowing information exposure has been identified in the WP Staging Pro WordPress Backup Plugin, affecting all versions through 6.1.2. The issue arises from missing capability checks in the getOutdatedPluginsRequest() function, which enables unauthenticated attackers to access information about outdated active or inactive plugins.

Impact

Exploitation of this vulnerability could lead to unauthorized disclosure of information regarding outdated plugins, both active and inactive, on the affected WordPress site.

Remediation

Users can update to WP Staging Pro version 6.1.3 or a newer patched version to address this vulnerability.