Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: WPBackItUp Clear all filters
TI-2024-28923 CVE-2024-43270 · GHSA-8r46-93rm-2v8m

WordPress Backup and Restore WordPress plugin <= 1.50 - Unauthenticated Broken Access Control vulnerability

Priority LOW 30

Missing Authorization vulnerability in WPBackItUp Backup and Restore WordPress allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Backup and Restore WordPress: from n/a through 1.50.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00381 Published 2024-11-01 No fix listed CWE-862
TI-2023-06616 CVE-2023-7232 · GHSA-qr4g-jhmq-xw23

Backup and Restore WordPress <= 1.45 - Unauthenticated Sensitive Data Exposure

Priority MEDIUM 63

The Backup and Restore WordPress WordPress plugin through 1.45 does not protect some log files containing sensitive information such as site configuration etc, allowing unauthenticated users to access such data

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00565 Published 2024-03-26 No fix listed