2 matches found
EUVD-2025-209272
The Backup Migration plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 2.0.0. This is due to a missing capability check on the 'initializeOfflineAjax' function and lack of proper nonce verification. The endpoint only validates against hardcoded toke...
5.3CVSS5.9AI score0.0058EPSS
SaveExploits0References5
CVE-2025-14944: Missing Authorization
The Backup Migration plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 2.0.0. This is due to a missing capability check on the 'initializeOfflineAjax' function and lack of proper nonce verification. The endpoint only validates against hardcoded toke...
5.3CVSS5.8AI score0.0058EPSS
SaveExploits0References2
20