Description
WordPress和WordPress plugin都是WordPress基金会的产品。WordPress是一套使用PHP语言开发的博客平台。该平台支持在PHP和MySQL的服务器上架设个人博客网站。WordPress plugin是一个应用插件。 WordPress plugin Database Toolset 1.8.4及之前版本存在信息泄露漏洞，该漏洞源于备份文件存储在公开可访问位置，可能导致敏感信息泄露。
WordPress plugin Database Toolset 信息泄露漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://avd.aliyun.com/detail?id=AVD-2025-4222
https://hackhalt.com/threat/cve-2025-4222/
https://access.redhat.com/security/cve/cve-2025-4222
https://www.wordfence.com/threat-intel/vulnerabilities/id/fa452a9a-9e26-41a1-8dea-4bafaf735bee
https://patchstack.com/database/wordpress/plugin/database-toolset/vulnerability/wordpress-database-toolset-plugin-1-8-4-arbitrary-file-deletion-vulnerability
https://wpscan.com/vulnerability/c7fc0077-000f-4024-aff6-ff0e3b9fab4d/
https://github.com/advisories/GHSA-3jmr-84q9-rpjf
https://plugins.trac.wordpress.org/browser/database-toolset/trunk/admin/class-database-toolset-backup.php