CyberRota Analysis
AI-GeneratedThe Keep Backup Daily plugin for WordPress versions prior to 2.1.4 is vulnerable to sensitive information exposure, enabling unauthenticated attackers to trigger a complete MySQL database dump via the publicly accessible `kbd_cron_process` parameter. This flaw allows attackers to predict the dump filename and download the backup from the uploads directory, potentially compromising sensitive data. WordPress site administrators using this plugin should prioritize immediate updates to mitigate the risk of unauthorized data access.
Original NVD Description
Keep Backup Daily plugin for WordPress before 2.1.4 contains a sensitive information exposure vulnerability that allows unauthenticated attackers to trigger a full MySQL database dump by accessing the publicly exposed `kbd_cron_process` parameter without authentication. Attackers can predict the partially predictable dump filename based on the database name, a limited random range, and the current Unix timestamp to download the generated backup from the publicly accessible uploads directory.