Lucene search

Backup Guard Security Vulnerabilities

cve

CVE-2017-10837

Cross-site scripting vulnerability in BackupGuard prior to version 1.1.47 allows an attacker to inject arbitrary web script or HTML via unspecified vectors.

6.1CVSS

5.9AI Score

0.001EPSS

2017-08-29 01:35 AM

cve

CVE-2017-18488

The Backup Guard plugin before 1.1.47 for WordPress has multiple XSS issues.

6.1CVSS

6.1AI Score

0.001EPSS

2019-08-13 06:15 PM

cve

CVE-2021-24155

The WordPress Backup and Migrate Plugin – Backup Guard WordPress plugin before 1.6.0 did not ensure that the imported files are of the SGBP format and extension, allowing high privilege users (admin+) to upload arbitrary files, including PHP ones, leading to RCE.

7.2CVSS

7AI Score

0.963EPSS

2021-04-05 07:15 PM