{"id":"CVE-2026-97240","published":"2026-09-30T13:17:35.747","lastModified":"2026-09-30T14:18:14.953","description":"Unauthenticated Sensitive Data Exposure in StifLi Backup Tools <= 2.2.7 versions.","cvssScore":7.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cwes":["CWE-201"],"vendors":[],"products":[],"references":[{"url":"https://patchstack.com/database/wordpress/plugin/stifli-backup-tools/vulnerability/wordpress-stifli-backup-tools-plugin-2-2-7-sensitive-data-exposure-vulnerability?_s_id=cve","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The StifLi Backup Tools application suffers from unauthenticated sensitive data exposure, allowing attackers to access backup files and related metadata without any authentication. This vulnerability is particularly concerning because it can lead to unauthorized access to potentially sensitive backup data.","exploitability":"Exploitation is straightforward with no prerequisites as the vulnerability affects unauthenticated access to sensitive data.","blast_radius":"The impact could be significant across multiple backup files and metadata, potentially exposing sensitive organizational data including personal information, financial records, or proprietary business data.","remediation":"Upgrade to version 2.2.8 or later to remediate this vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["data-exfiltration","backup","unauthenticated-access"],"model":"garnet-coder","analyzedAt":"2026-10-17T09:04:54.107Z"}}