CVE-2023-6505: 
WordPress vulnerability analysis and mitigation

CVE-2023-6505 affects the Migrate WordPress Website & Backups (Prime Mover) WordPress plugin versions before 1.9.3. The vulnerability was discovered by Dmitrii Ignatyev and was publicly disclosed on November 24, 2023. The issue involves a directory listing vulnerability in sensitive directories that contain export files (WPScan).

The vulnerability is classified as a Sensitive Data Disclosure (CWE-200) with a CVSS v3.1 base score of 7.5 (High). The vulnerability vector is CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, indicating that it can be exploited over the network with low attack complexity, requires no privileges or user interaction, and can result in high confidentiality impact (NVD).

The vulnerability allows unauthorized access to sensitive directories containing export files, which could lead to exposure of sensitive data. This is categorized under OWASP Top 10 as A3: Sensitive Data Exposure (WPScan).

The vulnerability has been fixed in version 1.9.3 of the Prime Mover plugin. Users are advised to update to this version or later to mitigate the security risk (WPScan).