An unauthenticated information disclosure vulnerability in the Backupbliss Backup Migration WordPress plugin allows remote attackers to download complete database backups via predictable file paths, posing a severe risk to organizational data confidentiality.

This is an insertion of sensitive information into an externally accessible file or directory flaw, categorized under CWE-538, where predictable file paths enable unauthenticated attackers to retrieve sensitive backup archives containing full database dumps.

The exposure of complete database backups can lead to the unauthorized disclosure of sensitive corporate information, proprietary data, and user credentials, resulting in significant reputational damage, regulatory non-compliance, and potential follow-up attacks. Although the CVSS score is 7.5, the complete exposure of core database assets warrants treating this vulnerability with high urgency.

Immediate Action: Update the Backup Migration plugin to the latest patched version available from the vendor, or remove the plugin immediately if it is no longer required.

Proactive Monitoring: Monitor web server access logs for anomalous, repeated GET requests targeting backup directories, configuration files, or direct archive file downloads.

Compensating Controls: Implement a Web Application Firewall rule to block direct external requests targeting backup file paths or archive extensions within the WordPress plugin directory.

Public Exploit Available: Yes, an exploit reference exists on ExploitDB.

Given the high severity of exposing complete database contents to unauthenticated actors, administrators must apply the vendor patch immediately. If an updated version is not currently available in your repository, disable the plugin to prevent potential data exfiltration until remediation can be verified.