BA
Vendor
Backupbliss
16
CVEs
0
On KEV
0
New 30D
Products
BM9.8
Backup Migration
Backupbliss
9 CVEs0 on KEV0 new
CL8.8
Clone
Backupbliss
5 CVEs0 on KEV0 new
BM5.4
Backup Migration (WordPress plugin)
Backupbliss
1 CVEs0 on KEV0 new
WP7.5
WordPress Plugin Backup Migration
Backupbliss
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2023-54346 | WP WordPress Plugin Backup Migration Backupbliss | 7.5 | May 5 | WordPress Plugin Backup Migration 1.2.8 Unauthenticated Database Backup Download |
| CVE-2024-43297 | CL Clone Backupbliss | 8.8 | Nov 1 | WordPress Clone plugin <= 2.4.5 - Broken Access Control vulnerability |
| CVE-2024-43298 | CL Clone Backupbliss | 8.8 | Nov 1 | WordPress Clone plugin <= 2.4.5 - Broken Access Control vulnerability |
| CVE-2023-6266 | BM Backup Migration Backupbliss | 7.5 | Jan 11 | Backup Migration <= 1.3.6 - Unauthenticated Arbitrary Backup Download to Sensitive Information Exposure |
| CVE-2023-6750 | CL Clone Backupbliss | 7.5 | Jan 8 | Clone < 2.4.3 - Unauthenticated Backup Download |
| CVE-2023-6271 | BM Backup Migration Backupbliss | 7.5 | Jan 1 | Backup Migration Staging < 1.3.6 - Sensitive Data Exposure |
| CVE-2023-7002 | BM Backup Migration Backupbliss | 7.2 | Dec 23 | Backup Migration <= 1.3.9 - Authenticated (Admin+) OS Command Injection via url |
| CVE-2023-6971 | BM Backup Migration Backupbliss | 9.8 | Dec 23 | The Backup Migration plugin for WordPress is vulnerable to Remote File Inclusion in versions 1.0.8 to 1.3.9 via the 'content-dir' HTTP header |
| CVE-2023-6972 | BM Backup Migration Backupbliss | 9.8 | Dec 23 | Backup Migration <= 1.3.9 - Unauthenticated Path Traversal to Arbitrary File Deletion |
| CVE-2023-6553 | BM Backup Migration Backupbliss | 9.8 | Dec 15 | Backup Migration <= 1.3.7 - Unauthenticated Remote Code Execution |
| CVE-2023-0958 | BM Backup Migration Backupbliss | 6.5 | Jul 28 | Inisev Plugins (Various Versions) - Missing Authorization on handle_installation function |
| CVE-2023-3977 | BM Backup Migration Backupbliss | 4.3 | Jul 28 | Inisev Plugins (Various Versions) - Cross-Site Request Forgery on handle_installation function |
| CVE-2021-36884 | BM Backup Migration (WordPress plugin) Backupbliss | 5.4 | Nov 19 | WordPress Backup Migration plugin <= 1.1.5 - Authenticated Persistent Cross-Site Scripting (XSS) vulnerability |