Bugtraq: WordPress Database Backup

published

My WordPress Database Backup plugin appeared on Bugtraq today. The folks who found the directory traversal vulnerability didn’t inform me about it. I don’t know if they informed the WordPress security folks. A kind reader forwarded to me the announcement.

I don’t have a fix at this time. Stay tuned here, or at the WordPress support forums.

UPDATE: Ryan Boren cooked up a fix for the directory traversal vulnerability. Download it here.


home / about / archive / RSS