Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: backupguard Component: Backup Guard Clear all filters
TI-2021-06447 CVE-2021-24155 · GHSA-h635-5m37-x3p5

Backup Guard < 1.6.0 - Authenticated Arbitrary File Upload

Priority HIGH 73

The WordPress Backup and Migrate Plugin – Backup Guard WordPress plugin before 1.6.0 did not ensure that the imported files are of the SGBP format and extension, allowing high privilege users (admin+) to upload arbitrary…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.84112 Published 2021-04-05 Fixed in 1.6.0 CWE-434
TI-2017-07938 CVE-2017-10837 · GHSA-h75c-8hcv-36gq

Cross-site scripting in BackupGuard

Priority LOW 29

Cross-site scripting vulnerability in BackupGuard prior to version 1.1.47 allows an attacker to inject arbitrary web script or HTML via unspecified vectors.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00923 Published 2017-08-28 No fix listed CWE-79