133 matches found
CVE-2017-2551
Vulnerability in Wordpress plugin BackWPup before v3.4.2 allows possible brute forcing of backup file for download...
CVE-2017-2551
Vulnerability in Wordpress plugin BackWPup before v3.4.2 allows possible brute forcing of backup file for download...
Design/Logic Flaw
Vulnerability in Wordpress plugin BackWPup before v3.4.2 allows possible brute forcing of backup file for download...
WordPress BackWPup plugin <=3.4.1 - Unrestricted Backup File Download
Unrestricted Backup File Download vulnerability found by Larry W. Cashdollar in WordPress BackWPup plugin versions =3.4.1. Backup files are stored insecurely and could be discovered by Google dork and exploited further even for brute-forcing. Solution Update the WordPress BackWPup plugin to the...
Wordpress BackWPup Plugin File Download Vulnerability
WordPress is the WordPress Software Foundation a set of blogging platform using PHP language development, the platform supports in PHP and MySQL server set up a personal blog site.BackWPup is one of the automatic backup plugin. A security vulnerability exists in versions of the Wordpress BackWPup...
CVE-2017-2551
The CVE concerns the WordPress BackWPup plugin, versions prior to 3.4.2, which allows brute-force download of backup files. Affected component: BackWPup WordPress plugin; root cause is a vulnerability enabling unauthorized retrieval of backups over the network. Impact: potential exposure of backu...
CVE-2017-2551
Vulnerability in Wordpress plugin BackWPup before v3.4.2 allows possible brute forcing of backup file for download...
BackWPup <= 3.4.1 - Backup File Download
The BackWPup – WordPress Backup Plugin WordPress plugin was affected by a Backup File Download security vulnerability...
WordPress BackWPup plugin <= 3.2.5 - Reflected Cross-Site Scripting (XSS) Vulnerability
In version 3.2.5, WordPress BackWPup plugin, some variables are echoed without escaping. Solution Update the plugin...
WordPress BackWPUp Plugin 1.7.1 - Remote & Local Code Execution
This plugin is prone to remote and local code execution vulnerability. Solution Update the plugin...
BackWPup 2.1.4 - Code Execution
The BackWPup – WordPress Backup Plugin WordPress plugin was affected by a Code Execution security vulnerability...
WordPress BackWPUp Plugin 2.1.4 Code Execution
No description provided by source. Sense of Security - Security Advisory - SOS-11-012 Release Date. 17-Oct-2011 Vendor Notification Date. 14-Oct-2011 Product. BackWPUp Platform. WordPress Affected versions. 2.1.4 Severity Rating. High Impact. System access Attack Vector. Remote without...
CVE-2013-4626
Cross-site scripting XSS vulnerability in the BackWPup plugin before 3.0.13 for WordPress allows remote attackers to inject arbitrary web script or HTML via the tab parameter to wp-admin/admin.php...
Cross site scripting
Cross-site scripting XSS vulnerability in the BackWPup plugin before 3.0.13 for WordPress allows remote attackers to inject arbitrary web script or HTML via the tab parameter to wp-admin/admin.php...
CVE-2013-4626
Cross-site scripting XSS vulnerability in the BackWPup plugin before 3.0.13 for WordPress allows remote attackers to inject arbitrary web script or HTML via the tab parameter to wp-admin/admin.php...
CVE-2013-4626
The CVE-2013-4626 issue affects the BackWPup WordPress Plugin (pre-3.0.13). The vulnerability arises from insufficient filtration of the GET parameter “tab” passed to /wp-admin/admin.php, enabling an attacker to inject arbitrary HTML/JavaScript via a crafted link and potentially run scripts in th...
Cross-Site Scripting (XSS) in BackWPup WordPress Plugin
Advisory ID: HTB23161 Product: BackWPup WordPress Plugin Vendor: Inpsyde GmbH Vulnerable Versions: 3.0.12 and probably prior Tested Version: 3.0.12 Vendor Notification: June 19, 2013 Vendor Patch: August 12, 2013 Public Disclosure: August 21, 2013 Vulnerability Type: Cross-Site Scripting CWE-79 C...
WordPress BackWPup 3.0.12 Cross Site Scripting Vulnerability
WordPress BackWPup plugin version 3.0.12 suffers from a cross site scripting vulnerability. Product: BackWPup WordPress Plugin Vendor: Inpsyde GmbH Vulnerable Versions: 3.0.12 and probably prior Tested Version: 3.0.12 Vendor Notification: June 19, 2013 Vendor Patch: August 12, 2013 Public...
WordPress BackWPup 3.0.12 Cross Site Scripting
Advisory ID: HTB23161 Product: BackWPup WordPress Plugin Vendor: Inpsyde GmbH Vulnerable Versions: 3.0.12 and probably prior Tested Version: 3.0.12 Vendor Notification: June 19, 2013 Vendor Patch: August 12, 2013 Public Disclosure: August 21, 2013 Vulnerability Type: Cross-Site Scripting CWE-79 C...
BackWPup <= 3.0.12 - Authenticated Cross-Site Scripting (XSS)
The BackWPup – WordPress Backup Plugin WordPress plugin was affected by an Authenticated Cross-Site Scripting XSS security vulnerability...