CVE-2025-34084

Severity CVSS v4.0:

CRITICAL

Type:

CWE-200 Information Leak / Disclosure

Publication date:

09/07/2025

Last modified:

16/07/2025

Description

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority as it is a duplicate of CVE-2020-36848.

Impact

Vector 4.0

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N CVSS v4.0 Severity and Metrics:

Base Score: 9.20 CRITICAL
Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N

Attack Vector (AV): Network
Attack Complexity (AC): Low
Attack Requirements (AT): None
Privileges Required (PR): None
User Interaction (UI): None
Confidentiality (VC): High
Integrity (VI): None
Availability (VA): None
Confidentiality (SC): High
Integrity (SI): None
Availability (SA): None

Base Score 4.0

9.20

Severity 4.0

CRITICAL

References to Advisories, Solutions, and Tools

https://plugins.trac.wordpress.org/changeset/2439376/boldgrid-backup
https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/auxiliary/scanner/http/wp_total_upkeep_downloader.rb
https://vulncheck.com/advisories/wordpress-total-upkeep-boldgrid-backup-plugin-info-disclosure
https://wordpress.org/plugins/boldgrid-backup/
https://www.boldgrid.com/wordpress-backup-plugin/
https://www.exploit-db.com/exploits/49252