BA
Product
Backupbuddy
6
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 1Low 0
Watch
Add Backupbuddy to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-31474 | 7.5 | Mar 13 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in iThemes BackupBuddy allows Path Traversal.This issue affects BackupBuddy: from… Affected: 8.5.8.0 before 8.7.5.0 |
| CVE-2022-4897 | 6.1 | Feb 21 | The BackupBuddy WordPress plugin before 8.8.3 does not sanitise and escape some parameters before outputting them back in various places, leading to Reflected Cross-Site Scripting Affected: before 8.8.3 |
| CVE-2013-2744 | – | Apr 2 | importbuddy.php in the BackupBuddy plugin 2.2.25 for WordPress allows remote attackers to obtain configuration information via a step 0 phpinfo action, which calls the phpinfo… Affected: 2.2.25 |
| CVE-2013-2743 | – | Apr 2 | importbuddy.php in the BackupBuddy plugin 1.3.4, 2.1.4, 2.2.25, 2.2.28, and 2.2.4 for WordPress allows remote attackers to bypass authentication via a crafted integer in the step… Affected: 1.3.4; 2.1.4; 2.2.4; 2.2.25; 2.2.28 |
| CVE-2013-2742 | – | Apr 2 | importbuddy.php in the BackupBuddy plugin 1.3.4, 2.1.4, 2.2.25, 2.2.28, and 2.2.4 for WordPress does not reliably delete itself after completing a restore operation, which makes… Affected: 1.3.4; 2.1.4; 2.2.4; 2.2.25; 2.2.28 |
| CVE-2013-2741 | – | Apr 2 | importbuddy.php in the BackupBuddy plugin 1.3.4, 2.1.4, 2.2.25, 2.2.28, and 2.2.4 for WordPress does not require that authentication be enabled, which allows remote attackers to… Affected: 1.3.4; 2.1.4; 2.2.4; 2.2.25; 2.2.28 |
Showing 6