Vendors / Inpsyde Records 6 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 3
Exploited now Inpsyde records in CISA KEV No Inpsyde vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 43
The BackWPup WordPress plugin before 4.0.4 does not prevent Directory Listing in its temporary backup folder, allowing unauthenticated attackers to download backups of a site's database.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.02242 · Published 2024-04-08 · Fixed in 4.0.4
Priority LOW 39
The BackWPup plugin for WordPress is vulnerable to Directory Traversal in versions up to, and including, 4.0.1 via the Log File Folder.
CVSS 3.1 HIGH 8.7· Network · High privileges · No interaction · EPSS 0.00918 · Published 2024-01-11 · No fix listed CWE-22
Priority LOW 36
Vulnerability in Wordpress plugin BackWPup before v3.4.2 allows possible brute forcing of backup file for download.
CVSS 3.0 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01671 · Published 2017-09-27 · Fixed in 3.4.1 CWE-552
Priority LOW 32
The BackWPup plugin for WordPress is vulnerable to Directory Traversal in versions up to, and including, 4.0.1 via the job-specific backup folder.
CVSS 3.1 MEDIUM 6.8· Network · High privileges · No interaction · EPSS 0.00981 · Published 2024-08-17 · No fix listed CWE-22
Priority LOW 14
The BackWPup plugin for WordPress is vulnerable to Plaintext Storage of Backup Destination Password in all versions up to, and including, 4.0.2.
CVSS 3.1 LOW 2.7· Network · High privileges · No interaction · EPSS 0.00449 · Published 2024-02-24 · No fix listed CWE-256
Open these records in search → All records by CVSS severity
0 3 2 1 0
THREATIST.IORead the docs