Read the docs

JetBackup

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

JetBackup records in CISA KEV

No JetBackup vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Jetbackup 5 records HIGH

Records

5 records in Jetbackup · all components

TI-2023-06552 CVE-2023-7165 · GHSA-p53g-6cxv-378j

JetBackup < 2.0.9.9 - Directory Listing Exposing Backups

Priority HIGH 72

The JetBackup WordPress plugin before 2.0.9.9 doesn't use index files to prevent public directory listing of sensitive directories in certain configurations, which allows malicious actors to leak backup files.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.019 Published 2024-02-27 Fixed in 2.0.9.9
TI-2020-18859 CVE-2020-36667 · GHSA-jr7p-69vw-fwhf

JetBackup – WP Backup, Migrate & Restore <= 1.4.1 - Missing Authorization to Unauthorized Backup Location Change

Priority LOW 25

The JetBackup – WP Backup, Migrate & Restore plugin for WordPress is vulnerable to unauthorized back-up location changes in versions up to, and including 1.4.1 due to a lack of proper capability checking on the backup_gu…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00483 Published 2023-03-07 No fix listed CWE-862
TI-2020-18860 CVE-2020-36668 · GHSA-9qwq-rm73-j3gr

JetBackup – WP Backup, Migrate & Restore <= 1.4.0 - Sensitive Information Disclosure

Priority LOW 21

The JetBackup – WP Backup, Migrate & Restore plugin for WordPress is vulnerable to sensitive information disclosure in versions up to, and including, 1.4.0 due to a lack of proper capability checking on the backup_guard_…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00639 Published 2023-03-07 No fix listed CWE-200
Open these records in search →