ShadowTrackr

Search the CVE vulnerability database

Look up vulnerabilities by software, product or CVE number.

1 result for “CVE-2020-36848”

CVEPublishedCVSSShadowTrackr CVSSSummary
CVE:
CVE-2020-36848
Published
2025-07-12
CVSS:
7.5
ShadowTrackr CVSS:
8.2
Summary:
The Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.14.9 via the env-info.php and restore-info.json files. This makes it possible for unauthenticated attackers to find the location of back-up files and subsequently download them.