Skip to content
Noroxi

BackupBliss – Backup & Migration with Free Cloud Storage

backup-backup · plugin

Known security vulnerabilities for BackupBliss – Backup & Migration with Free Cloud Storage. Find out in seconds which version runs on your site with WP Lens.

11 known vulnerabilities

3 critical · 3 with public exploit code · latest Aug 5, 2026

Vulnerabilities

  • CVE-2023-6972

    Backup Migration <= 1.3.9 - Unauthenticated Path Traversal to Arbitrary File Deletion

    Critical 9.8

  • CVE-2023-6971

    The Backup Migration plugin for WordPress is vulnerable to Remote File Inclusion in versions 1.0.8 to 1.3.9 via the 'content-dir' HTTP heade

    Critical 9.8

  • CVE-2023-6553

    Backup Migration <= 1.3.7 - Unauthenticated Remote Code Execution

    Critical 9.8

  • CVE-2024-10932

    Backup Migration <= 1.4.6 - Unauthenticated PHP Object Injection via 'recursive_unserialize_replace'

    High 8.8

  • CVE-2026-39480

    WordPress Backup Migration plugin <= 2.1.1 - Sensitive Data Exposure vulnerability

    High 7.5

  • CVE-2023-6266

    Backup Migration <= 1.3.6 - Unauthenticated Arbitrary Backup Download to Sensitive Information Exposure

    High 7.5

  • CVE-2026-7693

    Backup Migration <= 2.1.5.1 - Authenticated (Administrator+) OS Command Injection via 'file' Parameter

    High 7.2

  • CVE-2023-7002

    Backup Migration <= 1.3.9 - Authenticated (Admin+) OS Command Injection via url

    High 7.2

  • CVE-2021-36884

    WordPress Backup Migration plugin <= 1.1.5 - Authenticated Persistent Cross-Site Scripting (XSS) vulnerability

    Medium 5.4

  • CVE-2025-14944

    Backup Migration <= 2.0.0 - Missing Authorization to Unauthenticated Backup Upload to Offline Storage

    Medium 5.3

  • CVE-2024-32686

    WordPress Backup Migration plugin <= 1.4.3 - Sensitive Data Exposure via Log vulnerability

    Medium 5.3

← Back to directory