Vulnerability index

Browse CVEs

11 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Clone HIGH 8.8
CVE-2024-43297

Missing Authorization vulnerability in Migrate Clone allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Clone…

Fix: 2.4.6+
Fix from $1,950 2024-11-01
Clone HIGH 8.8
CVE-2024-43298

Missing Authorization vulnerability in Migrate Clone allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Clone…

Fix: 2.4.6+
Fix from $1,950 2024-11-01
Backup Migration HIGH 7.5
CVE-2023-6266

The Backup Migration plugin for WordPress is vulnerable to unauthorized access of data due to insufficient path and file validation on the BMI_BACKUP…

Fix: after 1.3.6
Fix from $1,950 2024-01-11
Clone HIGH 7.5
CVE-2023-6750

The Clone WordPress plugin before 2.4.3 uses buffer files to store in-progress backup informations, which is stored at a publicly accessible, statica…

Fix: 2.4.3+
Fix from $1,950 2024-01-08
Backup Migration HIGH 7.5
CVE-2023-6271

The Backup Migration WordPress plugin before 1.3.6 stores in-progress backups information in easy to find, publicly-accessible files, which may allow…

Fix: 1.3.6+
Fix from $1,950 2024-01-01
Backup Migration CRITICAL 9.8
CVE-2023-6971EPSS 6%

The Backup Migration plugin for WordPress is vulnerable to Remote File Inclusion in versions 1.0.8 to 1.3.9 via the 'content-dir' HTTP header. This m…

Fix: 1.4.0+
Fix from $2,300 2023-12-23
Backup Migration CRITICAL 9.8
CVE-2023-6972

The Backup Migration plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.3.9 via the 'content-backups' and '…

Fix: 1.4.0+
Fix from $2,300 2023-12-23
Backup Migration HIGH 7.2
CVE-2023-7002EPSS 46%

The Backup Migration plugin for WordPress is vulnerable to OS Command Injection in all versions up to, and including, 1.3.9 via the 'url' parameter.…

Fix: 1.4.0+
Fix from $1,950 2023-12-23
Backup Migration CRITICAL 9.8
CVE-2023-6553EPSS 98%

The Backup Migration plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.3.7 via the /includes/backup…

Fix: after 1.3.7
Fix from $2,300 2023-12-15
Backup Migration MEDIUM 6.5
CVE-2023-0958

Several plugins for WordPress by Inisev are vulnerable to unauthorized installation of plugins due to a missing capability check on the handle_instal…

Fix: 1.1.4 / 1.2.8+
Fix from $1,600 2023-07-28
Backup Migration MEDIUM 5.4
CVE-2021-36884

Authenticated Persistent Cross-Site Scripting (XSS) vulnerability discovered in WordPress Backup Migration plugin <= 1.1.5 versions.

Fix: after 1.1.5
Fix from $1,600 2021-11-19