157 matches found
CVE-2017-2551
Vulnerability in Wordpress plugin BackWPup before v3.4.2 allows possible brute forcing of backup file for download...
Design/Logic Flaw
Vulnerability in Wordpress plugin BackWPup before v3.4.2 allows possible brute forcing of backup file for download...
WordPress BackWPup plugin <=3.4.1 - Unrestricted Backup File Download
Unrestricted Backup File Download vulnerability found by Larry W. Cashdollar in WordPress BackWPup plugin versions =3.4.1. Backup files are stored insecurely and could be discovered by Google dork and exploited further even for brute-forcing. Solution Update the WordPress BackWPup plugin to the...
CVE-2017-2551: Files or Directories Accessible to External Parties
Vulnerability in Wordpress plugin BackWPup before v3.4.2 allows possible brute forcing of backup file for download...
Wordpress BackWPup Plugin File Download Vulnerability
WordPress is the WordPress Software Foundation a set of blogging platform using PHP language development, the platform supports in PHP and MySQL server set up a personal blog site.BackWPup is one of the automatic backup plugin. A security vulnerability exists in versions of the Wordpress BackWPup...
CVE-2017-2551
The CVE concerns the WordPress BackWPup plugin, versions prior to 3.4.2, which allows brute-force download of backup files. Affected component: BackWPup WordPress plugin; root cause is a vulnerability enabling unauthorized retrieval of backups over the network. Impact: potential exposure of backu...
CVE-2017-2551
Vulnerability in Wordpress plugin BackWPup before v3.4.2 allows possible brute forcing of backup file for download...
BackWPup <= 3.4.1 - Backup File Download
The BackWPup – WordPress Backup Plugin WordPress plugin was affected by a Backup File Download security vulnerability...
WordPress BackWPup plugin <= 3.2.5 - Reflected Cross-Site Scripting (XSS) Vulnerability
In version 3.2.5, WordPress BackWPup plugin, some variables are echoed without escaping. Solution Update the plugin...
WordPress BackWPUp Plugin 1.7.1 - Remote & Local Code Execution
This plugin is prone to remote and local code execution vulnerability. Solution Update the plugin...
BackWPup 2.1.4 - Code Execution
The BackWPup – WordPress Backup Plugin WordPress plugin was affected by a Code Execution security vulnerability...
WordPress BackWPUp Plugin 2.1.4 Code Execution
No description provided by source. Sense of Security - Security Advisory - SOS-11-012 Release Date. 17-Oct-2011 Vendor Notification Date. 14-Oct-2011 Product. BackWPUp Platform. WordPress Affected versions. 2.1.4 Severity Rating. High Impact. System access Attack Vector. Remote without...
CVE-2013-4626
Cross-site scripting XSS vulnerability in the BackWPup plugin before 3.0.13 for WordPress allows remote attackers to inject arbitrary web script or HTML via the tab parameter to wp-admin/admin.php...
Cross site scripting
Cross-site scripting XSS vulnerability in the BackWPup plugin before 3.0.13 for WordPress allows remote attackers to inject arbitrary web script or HTML via the tab parameter to wp-admin/admin.php...
CVE-2013-4626
Cross-site scripting XSS vulnerability in the BackWPup plugin before 3.0.13 for WordPress allows remote attackers to inject arbitrary web script or HTML via the tab parameter to wp-admin/admin.php...
CVE-2013-4626
The CVE-2013-4626 issue affects the BackWPup WordPress Plugin (pre-3.0.13). The vulnerability arises from insufficient filtration of the GET parameter “tab” passed to /wp-admin/admin.php, enabling an attacker to inject arbitrary HTML/JavaScript via a crafted link and potentially run scripts in th...
PT-2013-5105
Name of the Vulnerable Software and Affected Versions BackWPup plugin versions prior to 3.0.13 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the tab parameter to "wp-admin/admin.php". Recommendations For versions prior to 3.0.13,...
CVE-2013-4626: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the BackWPup plugin before 3.0.13 for WordPress allows remote attackers to inject arbitrary web script or HTML via the tab parameter to wp-admin/admin.php...
Cross-Site Scripting (XSS) in BackWPup WordPress Plugin
Advisory ID: HTB23161 Product: BackWPup WordPress Plugin Vendor: Inpsyde GmbH Vulnerable Versions: 3.0.12 and probably prior Tested Version: 3.0.12 Vendor Notification: June 19, 2013 Vendor Patch: August 12, 2013 Public Disclosure: August 21, 2013 Vulnerability Type: Cross-Site Scripting CWE-79 C...
WordPress BackWPup 3.0.12 Cross Site Scripting Vulnerability
WordPress BackWPup plugin version 3.0.12 suffers from a cross site scripting vulnerability. Product: BackWPup WordPress Plugin Vendor: Inpsyde GmbH Vulnerable Versions: 3.0.12 and probably prior Tested Version: 3.0.12 Vendor Notification: June 19, 2013 Vendor Patch: August 12, 2013 Public...