Read the docs

backupguard

Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

backupguard records in CISA KEV

No backupguard vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Backup Guard 3 records HIGH

Records

3 records in Backup Guard · all components

TI-2021-06447 CVE-2021-24155 · GHSA-h635-5m37-x3p5

Backup Guard < 1.6.0 - Authenticated Arbitrary File Upload

Priority HIGH 73

The WordPress Backup and Migrate Plugin – Backup Guard WordPress plugin before 1.6.0 did not ensure that the imported files are of the SGBP format and extension, allowing high privilege users (admin+) to upload arbitrary…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.84112 Published 2021-04-05 Fixed in 1.6.0 CWE-434
TI-2017-07938 CVE-2017-10837 · GHSA-h75c-8hcv-36gq

Cross-site scripting in BackupGuard

Priority LOW 29

Cross-site scripting vulnerability in BackupGuard prior to version 1.1.47 allows an attacker to inject arbitrary web script or HTML via unspecified vectors.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00923 Published 2017-08-28 No fix listed CWE-79
Open these records in search →