TI-2023-06620 CVE-2023-7236 · GHSA-546c-jgxm-3c33
Backup Bolt <= 1.3.0 - Sensitive Data Exposure
Priority LOW 22
The Backup Bolt WordPress plugin through 1.3.0 is vulnerable to Information Exposure via the unprotected access of debug logs.
Backup Bolt
Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Backup Bolt records in CISA KEVNo Backup Bolt vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
3 records
TI-2025-31155 CVE-2025-49040 · GHSA-c2w2-9r9f-q44q
WordPress Backup Bolt plugin <= 1.5.0 - Cross Site Request Forgery (CSRF) vulnerability
Priority LOW 19
Cross-Site Request Forgery (CSRF) vulnerability in Backup Bolt Backup Bolt backup-bolt allows Cross Site Request Forgery.This issue affects Backup Bolt: from n/a through <= 1.5.0.
TI-2025-09456 CVE-2025-10306 · GHSA-jf45-qjm9-j9p9
Backup Bolt <= 1.4.1 - Authenticated (Admin+) Arbitrary File Download
Priority LOW 18
The Backup Bolt plugin for WordPress is vulnerable to arbitrary file downloads and backup location writes in all versions up to, and including, 1.4.1 via the process_backup_batch() function.