The Migrate WordPress Website & Backups WordPress plugin before 1.9.3 does not prevent directory listing in sensitive directories containing export files.
CVSS 3.1HIGH 7.5·Network·No auth·No interaction·EPSS 0.39867·Published 2024-01-08·Fixed in 1.9.3