CVE-2021-24155

The CVE-2021-24155 vulnerability affects WordPress Backup Guard plugin prior to 1.6.0. The authenticated arbitrary file upload flaw does not validate that imported files are in the SGBP format/extension, enabling high-privilege (admin+) users to upload arbitrary files, including PHP, and potentia...

WordPress 代码问题漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A code issue vulnerability exists in the WordPress plugin Backup and Migrate Plugin Backup Guard...

WordPress Backup Guard plugin <= 1.5.9 - Authenticated Arbitrary File Upload vulnerability

Authenticated Arbitrary File Upload vulnerability found by Nguyen Van Khanh in WordPress Backup Guard plugin versions = 1.5.9. Solution Update the WordPress Backup Guard plugin to the latest available version at least 1.6.0...

Backup Guard < 1.6.0 - Authenticated Arbitrary File Upload

The plugin did not ensure that the imported files are of the SGBP format and extension, allowing high privilege users admin+ to upload arbitrary files, including PHP ones, leading to RCE. Additional Info, and Bypass of .htaccess protection found by WPScanTeam, while confirming the issue: There is...

Backup Guard < 1.6.0 - Authenticated Arbitrary File Upload

The plugin did not ensure that the imported files are of the SGBP format and extension, allowing high privilege users admin+ to upload arbitrary files, including PHP ones, leading to RCE. Additional Info, and Bypass of .htaccess protection found by WPScanTeam, while confirming the issue: There is...

CVE-2017-18488

The Backup Guard plugin before 1.1.47 for WordPress has multiple XSS issues...

CVE-2017-18488

The Backup Guard plugin before 1.1.47 for WordPress has multiple XSS issues...

Cross site scripting

The Backup Guard plugin before 1.1.47 for WordPress has multiple XSS issues...

CVE-2017-18488

CVE-2017-18488 affects the Backup Guard WordPress plugin, with multiple XSS issues reported in versions prior to 1.1.47. The connected documents confirm the existence of XSS in this plugin, but do not provide technical details about the exact vulnerable component, root cause, impact specifics, ex...

CVE-2017-18488

The Backup Guard plugin before 1.1.47 for WordPress has multiple XSS issues...

BackupGuard < 1.1.47 - Authenticated Cross-Site Scripting (XSS)

The WordPress Backup and Migrate Plugin – Backup Guard WordPress plugin was affected by an Authenticated Cross-Site Scripting XSS security vulnerability...

Backup Guard < 1.0.3 - Authenticated Arbitrary File Upload

The plugin allowed any authenticated user to call the AJAX actions, including the one to import backups which could lead to arbitrary file upload...