Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Vendor: backupguard Clear all filters
TI-2026-04236 CVE-2026-4853 · GHSA-8cfg-qq42-h3w8

Path traversal in backupguard JetBackup – Backup, Restore & Migrate

Priority LOW 24

The JetBackup – Backup, Restore & Migrate plugin for WordPress is vulnerable to Path Traversal leading to Arbitrary Directory Deletion in versions up to and including 3.1.19.8.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00713 Published 2026-04-17 No fix listed CWE-22
TI-2020-18860 CVE-2020-36668 · GHSA-9qwq-rm73-j3gr

JetBackup – WP Backup, Migrate & Restore <= 1.4.0 - Sensitive Information Disclosure

Priority LOW 21

The JetBackup – WP Backup, Migrate & Restore plugin for WordPress is vulnerable to sensitive information disclosure in versions up to, and including, 1.4.0 due to a lack of proper capability checking on the backup_guard_…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00639 Published 2023-03-07 No fix listed CWE-200
TI-2020-18859 CVE-2020-36667 · GHSA-jr7p-69vw-fwhf

JetBackup – WP Backup, Migrate & Restore <= 1.4.1 - Missing Authorization to Unauthorized Backup Location Change

Priority LOW 25

The JetBackup – WP Backup, Migrate & Restore plugin for WordPress is vulnerable to unauthorized back-up location changes in versions up to, and including 1.4.1 due to a lack of proper capability checking on the backup_gu…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00483 Published 2023-03-07 No fix listed CWE-862
TI-2021-06447 CVE-2021-24155 · GHSA-h635-5m37-x3p5

Backup Guard < 1.6.0 - Authenticated Arbitrary File Upload

Priority HIGH 73

The WordPress Backup and Migrate Plugin – Backup Guard WordPress plugin before 1.6.0 did not ensure that the imported files are of the SGBP format and extension, allowing high privilege users (admin+) to upload arbitrary…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.84112 Published 2021-04-05 Fixed in 1.6.0 CWE-434
TI-2017-07938 CVE-2017-10837 · GHSA-h75c-8hcv-36gq

Cross-site scripting in BackupGuard

Priority LOW 29

Cross-site scripting vulnerability in BackupGuard prior to version 1.1.47 allows an attacker to inject arbitrary web script or HTML via unspecified vectors.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00923 Published 2017-08-28 No fix listed CWE-79