Backupbliss

13 CVEs across 4 Backupbliss products. Browse Backupbliss vulnerabilities, severities, and proof-of-concept exploits.

Backupbliss products with known CVEs

ProductCVEs
Backup Migration9
Clone5
Backup Migration (WordPress Plugin)1
WordPress Plugin Backup Migration1
Backupbliss CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2023-54346High7.52026-05-05WordPress Plugin Backup Migration 1.2.8 contains an information disclosure vulnerability that allows unauthenticated attackers to download complete database ba…
CVE-2024-43298Medium4.32024-11-01Missing Authorization vulnerability in Migrate Clone allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Clone: from n/a…
CVE-2024-43297Medium4.32024-11-01Missing Authorization vulnerability in Migrate Clone allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Clone: from n/a…
CVE-2023-6266High7.52024-01-11The Backup Migration plugin for WordPress is vulnerable to unauthorized access of data due to insufficient path and file validation on the BMI_BACKUP case of t…
CVE-2023-6750High7.52024-01-08The Clone WordPress plugin before 2.4.3 uses buffer files to store in-progress backup informations, which is stored at a publicly accessible, statically define…
CVE-2023-6271High7.52024-01-01The Backup Migration WordPress plugin before 1.3.6 stores in-progress backups information in easy to find, publicly-accessible files, which may allow attackers…
CVE-2023-7002High7.22023-12-23The Backup Migration plugin for WordPress is vulnerable to OS Command Injection in all versions up to, and including, 1.3.9 via the 'url' parameter. This vuln…
CVE-2023-6972Critical9.82023-12-23The Backup Migration plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.3.9 via the 'content-backups' and 'content-na…
CVE-2023-6971High8.12023-12-23The Backup Migration plugin for WordPress is vulnerable to Remote File Inclusion in versions 1.0.8 to 1.3.9 via the 'content-dir' HTTP header. This makes it po…
CVE-2023-6553Critical9.82023-12-15The Backup Migration plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.3.7 via the /includes/backup-heart.php…
CVE-2023-3977Medium4.32023-07-28Several plugins for WordPress by Inisev are vulnerable to Cross-Site Request Forgery to unauthorized installation of plugins due to a missing nonce check on th…
CVE-2023-0958Medium4.32023-07-28Several plugins for WordPress by Inisev are vulnerable to unauthorized installation of plugins due to a missing capability check on the handle_installation fun…
CVE-2021-36884Medium4.82021-11-19Authenticated Persistent Cross-Site Scripting (XSS) vulnerability discovered in WordPress Backup Migration plugin <= 1.1.5 versions.