Backupbliss records
12 published records for vendor backupbliss.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 1 · 8.3%
- Pre-auth RCE
- 2
- With a fix record
- 33.3%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-862 Missing Authorization3
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor3
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
- CWE-829 Inclusion of Functionality from Untrusted Control Sphere1
The weakness classes this vendor ships most often: where to look.
CWEAll records
12 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
68This week | CVE-2023-6553Weaponized | Backup Migration <= 1.3.7 - Unauthenticated Remote Code Executionbackupbliss · backup migration · CWE-94 | Critical9.8 | — | 97.8% | Dec 15, 2023 |
41Plan | CVE-2023-6971No exploit | The Backup Migration plugin for WordPress is vulnerable to Remote File Inclusion in versions 1.0.8 to 1.3.9 via the 'content-dir' HTTP headebackupbliss · backup migration · CWE-829 | Critical9.8 | — | 6.4% | Dec 22, 2023 |
39Monitor | CVE-2023-6972Proof of concept | Backup Migration <= 1.3.9 - Unauthenticated Path Traversal to Arbitrary File Deletionbackupbliss · backup migration · CWE-22 | Critical9.8 | — | 1.3% | Dec 22, 2023 |
37Monitor | CVE-2023-7002No exploit | Backup Migration <= 1.3.9 - Authenticated (Admin+) OS Command Injection via urlbackupbliss · backup migration · CWE-78 | High7.2 | — | 30.7% | Dec 22, 2023 |
35Monitor | CVE-2024-43298No exploit | WordPress Clone plugin <= 2.4.5 - Broken Access Control vulnerabilitybackupbliss · clone · CWE-862 | High8.8 | — | 0.4% | Nov 1, 2024 |
35Monitor | CVE-2024-43297No exploit | WordPress Clone plugin <= 2.4.5 - Broken Access Control vulnerabilitybackupbliss · clone · CWE-862 | High8.8 | — | 0.4% | Nov 1, 2024 |
31Monitor | CVE-2023-6266Proof of concept | Backup Migration <= 1.3.6 - Unauthenticated Arbitrary Backup Download to Sensitive Information Exposurebackupbliss · backup migration · CWE-200 | High7.5 | — | 2.0% | Jan 11, 2024 |
31Monitor | CVE-2023-6750Proof of concept | Clone < 2.4.3 - Unauthenticated Backup Downloadbackupbliss · clone · CWE-200 | High7.5 | — | 1.9% | Jan 8, 2024 |
30Monitor | CVE-2023-6271No exploit | Backup Migration Staging < 1.3.6 - Sensitive Data Exposurebackupbliss · backup migration · CWE-200 | High7.5 | — | 0.6% | Jan 1, 2024 |
26Monitor | CVE-2023-0958No exploit | Inisev Plugins (Various Versions) - Missing Authorization on handle_installation functioninisev · enhanced text widget · CWE-862 | Medium6.5 | — | 0.6% | Jul 28, 2023 |
21Monitor | CVE-2021-36884No exploit | WordPress Backup Migration plugin <= 1.1.5 - Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilitybackupbliss · backup migration · CWE-79 | Medium5.4 | — | 0.5% | Nov 19, 2021 |
17Monitor | CVE-2023-3977No exploit | Inisev Plugins (Various Versions) - Cross-Site Request Forgery on handle_installation functioninisev · enhanced text widget · CWE-352 | Medium4.3 | — | 0.6% | Jul 28, 2023 |
- CVE-2023-655368This week
Backup Migration <= 1.3.7 - Unauthenticated Remote Code Execution
CriticalCVSS 9.8WeaponizedEPSS 97%backupbliss · backup migrationDec 15, 2023
- CVE-2023-697141Plan
The Backup Migration plugin for WordPress is vulnerable to Remote File Inclusion in versions 1.0.8 to 1.3.9 via the 'content-dir' HTTP heade
CriticalCVSS 9.8No exploitEPSS 6%backupbliss · backup migrationDec 22, 2023
- CVE-2023-697239Monitor
Backup Migration <= 1.3.9 - Unauthenticated Path Traversal to Arbitrary File Deletion
CriticalCVSS 9.8Proof of conceptEPSS 1%backupbliss · backup migrationDec 22, 2023
- CVE-2023-700237Monitor
Backup Migration <= 1.3.9 - Authenticated (Admin+) OS Command Injection via url
HighCVSS 7.2No exploitEPSS 30%backupbliss · backup migrationDec 22, 2023
- CVE-2024-4329835Monitor
WordPress Clone plugin <= 2.4.5 - Broken Access Control vulnerability
HighCVSS 8.8No exploitEPSS 0%backupbliss · cloneNov 1, 2024
- CVE-2024-4329735Monitor
WordPress Clone plugin <= 2.4.5 - Broken Access Control vulnerability
HighCVSS 8.8No exploitEPSS 0%backupbliss · cloneNov 1, 2024
- CVE-2023-626631Monitor
Backup Migration <= 1.3.6 - Unauthenticated Arbitrary Backup Download to Sensitive Information Exposure
HighCVSS 7.5Proof of conceptEPSS 2%backupbliss · backup migrationJan 11, 2024
- CVE-2023-675031Monitor
Clone < 2.4.3 - Unauthenticated Backup Download
HighCVSS 7.5Proof of conceptEPSS 1%backupbliss · cloneJan 8, 2024
- CVE-2023-627130Monitor
Backup Migration Staging < 1.3.6 - Sensitive Data Exposure
HighCVSS 7.5No exploitEPSS 0%backupbliss · backup migrationJan 1, 2024
- CVE-2023-095826Monitor
Inisev Plugins (Various Versions) - Missing Authorization on handle_installation function
MediumCVSS 6.5No exploitEPSS 0%inisev · enhanced text widgetJul 28, 2023
- CVE-2021-3688421Monitor
WordPress Backup Migration plugin <= 1.1.5 - Authenticated Persistent Cross-Site Scripting (XSS) vulnerability
MediumCVSS 5.4No exploitEPSS 0%backupbliss · backup migrationNov 19, 2021
- CVE-2023-397717Monitor
Inisev Plugins (Various Versions) - Cross-Site Request Forgery on handle_installation function
MediumCVSS 4.3No exploitEPSS 0%inisev · enhanced text widgetJul 28, 2023