Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Backup Bolt Clear all filters
TI-2025-09456 CVE-2025-10306 · GHSA-jf45-qjm9-j9p9

Backup Bolt <= 1.4.1 - Authenticated (Admin+) Arbitrary File Download

Priority LOW 18

The Backup Bolt plugin for WordPress is vulnerable to arbitrary file downloads and backup location writes in all versions up to, and including, 1.4.1 via the process_backup_batch() function.

CVSS 3.1LOW 3.8 Network High privileges No interaction EPSS 0.00311 Published 2025-10-03 No fix listed CWE-73
TI-2023-06620 CVE-2023-7236 · GHSA-546c-jgxm-3c33

Backup Bolt <= 1.3.0 - Sensitive Data Exposure

Priority LOW 22

The Backup Bolt WordPress plugin through 1.3.0 is vulnerable to Information Exposure via the unprotected access of debug logs.

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.0055 Published 2024-03-18 No fix listed CWE-79