Read the docs

backupguard

Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

backupguard records in CISA KEV

No backupguard vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Backup Guard 3 records HIGH

Records

7 records

TI-2021-06447 CVE-2021-24155 · GHSA-h635-5m37-x3p5

Backup Guard < 1.6.0 - Authenticated Arbitrary File Upload

Priority HIGH 73

The WordPress Backup and Migrate Plugin – Backup Guard WordPress plugin before 1.6.0 did not ensure that the imported files are of the SGBP format and extension, allowing high privilege users (admin+) to upload arbitrary…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.84112 Published 2021-04-05 Fixed in 1.6.0 CWE-434
TI-2017-07938 CVE-2017-10837 · GHSA-h75c-8hcv-36gq

Cross-site scripting in BackupGuard

Priority LOW 29

Cross-site scripting vulnerability in BackupGuard prior to version 1.1.47 allows an attacker to inject arbitrary web script or HTML via unspecified vectors.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00923 Published 2017-08-28 No fix listed CWE-79
TI-2020-18859 CVE-2020-36667 · GHSA-jr7p-69vw-fwhf

JetBackup – WP Backup, Migrate & Restore <= 1.4.1 - Missing Authorization to Unauthorized Backup Location Change

Priority LOW 25

The JetBackup – WP Backup, Migrate & Restore plugin for WordPress is vulnerable to unauthorized back-up location changes in versions up to, and including 1.4.1 due to a lack of proper capability checking on the backup_gu…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00483 Published 2023-03-07 No fix listed CWE-862
TI-2026-04236 CVE-2026-4853 · GHSA-8cfg-qq42-h3w8

Path traversal in backupguard JetBackup – Backup, Restore & Migrate

Priority LOW 24

The JetBackup – Backup, Restore & Migrate plugin for WordPress is vulnerable to Path Traversal leading to Arbitrary Directory Deletion in versions up to and including 3.1.19.8.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00713 Published 2026-04-17 No fix listed CWE-22
TI-2020-18860 CVE-2020-36668 · GHSA-9qwq-rm73-j3gr

JetBackup – WP Backup, Migrate & Restore <= 1.4.0 - Sensitive Information Disclosure

Priority LOW 21

The JetBackup – WP Backup, Migrate & Restore plugin for WordPress is vulnerable to sensitive information disclosure in versions up to, and including, 1.4.0 due to a lack of proper capability checking on the backup_guard_…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00639 Published 2023-03-07 No fix listed CWE-200
Open these records in search →