Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

6 records

Vendor: BoldGrid Component: Total Upkeep Clear all filters
TI-2020-18983 CVE-2020-36848 · GHSA-qcmh-3f59-hmv7

Total Upkeep by BoldGrid <= 1.14.9 - Unauthenticated Backup Download

Priority MEDIUM 43

The Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.14.9 via the env-info.php and res…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01877 Published 2025-07-12 No fix listed CWE-200
TI-2025-01982 CVE-2025-2257 · GHSA-x6vp-wm9x-hvcc

OS command injection in BoldGrid Total Upkeep – WordPress Backup Plugin plus Restore &…

Priority LOW 35

The Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.16.10 via the compression_level setting.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00864 Published 2025-03-26 No fix listed CWE-78
TI-2024-12927 CVE-2024-13907 · GHSA-5jg7-jg3h-568w

Server-side request forgery in BoldGrid Total Upkeep – WordPress Backup Plugin plus…

Priority LOW 29

The Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.16.8 via the 'download' function.

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.00469 Published 2025-02-27 No fix listed CWE-918
TI-2024-08780 CVE-2024-9461 · GHSA-qpv5-9fm8-4hfv

Total Upkeep <= 1.16.6 - Authenticated (Administrator+) Remote Code Execution via Backup Settings

Priority LOW 36

The Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.16.6 via the cron_interval parameter.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01041 Published 2024-11-26 No fix listed CWE-78
TI-2024-16383 CVE-2024-24869 · GHSA-82rx-89fp-4w49

WordPress Total Upkeep plugin <= 1.15.8 - Arbitrary File Download vulnerability

Priority MEDIUM 40

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in BoldGrid Total Upkeep allows Relative Path Traversal.This issue affects Total Upkeep: from n/a through 1.15.8.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00658 Published 2024-05-17 No fix listed CWE-22