CVE-2013-2743

CVE-2013-2743 describes an authentication bypass vulnerability in the importbuddy.php component of the BackupBuddy plugin for WordPress, affecting versions 1.3.4, 2.1.4, 2.2.25, 2.2.28, and 2.2.4. This flaw allows remote, unauthenticated attackers to bypass security checks by manipulating the 'step' parameter, potentially leading to unauthorized access and compromise of confidentiality, integrity, and availability. With a CVSS score of 7.5, it is considered highly severe due to its network-based attack vector and low attack complexity. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this vulnerability.