Browse CVEs

HIGH 8.8 CVE-2024-43297 Missing Authorization vulnerability in Migrate Clone allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Clone… Clone 2.4.6+ Fix from $1,9502024-11-01 HIGH 8.8 CVE-2024-43298 Missing Authorization vulnerability in Migrate Clone allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Clone… Clone 2.4.6+ Fix from $1,9502024-11-01 HIGH 7.5 CVE-2023-6266 The Backup Migration plugin for WordPress is vulnerable to unauthorized access of data due to insufficient path and file validation on the BMI_BACKUP… Backup Migration after 1.3.6 Fix from $1,9502024-01-11 HIGH 7.5 CVE-2023-6750 The Clone WordPress plugin before 2.4.3 uses buffer files to store in-progress backup informations, which is stored at a publicly accessible, statica… Clone 2.4.3+ Fix from $1,9502024-01-08 HIGH 7.5 CVE-2023-6271 The Backup Migration WordPress plugin before 1.3.6 stores in-progress backups information in easy to find, publicly-accessible files, which may allow… Backup Migration 1.3.6+ Fix from $1,9502024-01-01 CRITICAL 9.8 CVE-2023-6971EPSS 6% The Backup Migration plugin for WordPress is vulnerable to Remote File Inclusion in versions 1.0.8 to 1.3.9 via the 'content-dir' HTTP header. This m… Backup Migration 1.4.0+ Fix from $2,3002023-12-23 CRITICAL 9.8 CVE-2023-6972 The Backup Migration plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.3.9 via the 'content-backups' and '… Backup Migration 1.4.0+ Fix from $2,3002023-12-23 HIGH 7.2 CVE-2023-7002EPSS 46% The Backup Migration plugin for WordPress is vulnerable to OS Command Injection in all versions up to, and including, 1.3.9 via the 'url' parameter.… Backup Migration 1.4.0+ Fix from $1,9502023-12-23 CRITICAL 9.8 CVE-2023-6553EPSS 98% The Backup Migration plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.3.7 via the /includes/backup… Backup Migration after 1.3.7 Fix from $2,3002023-12-15 MEDIUM 6.5 CVE-2023-0958 Several plugins for WordPress by Inisev are vulnerable to unauthorized installation of plugins due to a missing capability check on the handle_instal… Backup Migration 1.1.4 / 1.2.8+ Fix from $1,6002023-07-28 MEDIUM 5.4 CVE-2021-36884 Authenticated Persistent Cross-Site Scripting (XSS) vulnerability discovered in WordPress Backup Migration plugin <= 1.1.5 versions. Backup Migration after 1.1.5 Fix from $1,6002021-11-19