About the fixed security exploit in getting working data

Hello,

no, i will not give to many details, to protect older installations of BackWPup a bit.

To use that the Attacker must know Plugin nonces. Than he can read a file system file outside the defined folder.

For thta the tools.php will not used and it is not download_backup_file that will be used for that. download_backup_file will not used in komplete BackWPup 😉