CVE-2025-12394

MediumCVSS 5.9

Published: 24/11/2025(UTC)Updated: 08/10/2026(UTC)Translated: 08/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.28%

19th percentile - higher than 19% of all known CVEs

Summary

The Backup Migration WordPress plugin before 2.0.0 does not properly generate its backup path in certain server configurations, allowing unauthenticated users to fetch a log that discloses the backup filename. The backup archive is then downloadable without authentication.

Risk Assessment

Attackers can download backup archives containing sensitive data, potentially leading to data leakage or confidentiality breach.

Recommendation

Update the plugin to version 2.0.0 or later immediately. Also check for unauthorized backup downloads.

Other vulnerabilities in Backup Migration WordPress plugin

CVE-2026-18216Medium
The Backup Migration WordPress plugin before version 2.1.7 does not properly restrict a post-restore automatic login mechanism. A user who administers one site of a multisite network can obtain a long-lived authenticated session as an administrator of another site in the same network, without credentials and bypassing two-factor authentication.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS