WP SuperBackup <= 2.3.3 - Unauthenticated Arbitrary File Upload to RCE

The Super Backup & Clone - Migrate for WordPress plugin indeed-wp-superbackup is vulnerable to arbitrary file uploads due to missing file type validation and a missing capability check on the ibkrestoremigratecheck function in all versions up to and including 2.3.3. Unauthenticated attackers can...

CVE-2024-56064

CVE-2024-56064 WP SuperBackup = 2.3.3 - 未認証の任意ファイルアップロード 説明 WordPress用プラグイン「Super Backup & Clone - Migrate for WordPress」は、2.3.3 以前のすべてのバージョンにおいてファイルタイプの検証が欠如しているため、任意のファイルアップロードに対して脆弱です。これにより、未認証の攻撃者が影響を受けるサイトのサーバー上に任意のファイルをアップロードできる可能性があり、リモートコード実行が可能になる可能性があります。 詳細 タイプ : plugin スラッグ :...

CVE-2024-56067

CVE-2024-56067 WP SuperBackup = 2.3.3 - 認可の欠如による未認証バックアップファイルのダウンロード 説明 WordPress用プラグイン「Super Backup & Clone - Migrate for WordPress」は、2.3.3までの全バージョンにおいて、関数の権限チェックが欠如しているため、不正アクセスに対して脆弱です。これにより、未認証の攻撃者がバックアップ全体をダウンロードできる可能性があります。 詳細 タイプ : プラグイン スラッグ : indeed-wp-superbackup 影響を受けるバージョン : 2.3.3...

EUVD-2024-52965

Malicious code in bioql PyPI...

EUVD-2024-52968

Malicious code in bioql PyPI...

EUVD-2024-52966

Malicious code in bioql PyPI...

EUVD-2024-52967

Malicious code in bioql PyPI...

VulnCheck KEV: CVE-2024-56064

Unrestricted Upload of File with Dangerous Type vulnerability in azzaroco WP SuperBackup indeed-wp-superbackup allows Upload a Web Shell to a Web Server.This issue affects WP SuperBackup: from n/a through = 2.3.3...

CVE-2024-56064

Unrestricted Upload of File with Dangerous Type vulnerability in azzaroco WP SuperBackup indeed-wp-superbackup allows Upload a Web Shell to a Web Server.This issue affects WP SuperBackup: from n/a through = 2.3.3...

CVE-2024-56070

Missing Authorization vulnerability in azzaroco WP SuperBackup indeed-wp-superbackup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP SuperBackup: from n/a through = 2.3.3...

CVE-2024-56069

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in azzaroco WP SuperBackup indeed-wp-superbackup allows Reflected XSS.This issue affects WP SuperBackup: from n/a through = 2.3.3...

CVE-2024-56067

Missing Authorization vulnerability in azzaroco WP SuperBackup indeed-wp-superbackup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP SuperBackup: from n/a through = 2.3.3...

WordPress SuperBackup 2.3.3 Missing Authorization Vulnerability

CVE-2024-56067 WP SuperBackup = 2.3.3 - Missing Authorization to Unauthenticated Back-Up File Download Description The Super Backup & Clone - Migrate for WordPress plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and...

WordPress SuperBackup 2.3.3 Shell Upload Vulnerability

CVE-2024-56064 WP SuperBackup = 2.3.3 - Unauthenticated Arbitrary File Upload Description The Super Backup & Clone - Migrate for WordPress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 2.3.3. This makes it...

WordPress SuperBackup 2.3.3 Missing Authorization

WordPress SuperBackup plugin versions 2.3.3 and below suffer from a backup disclosure due to a missing authorization vulnerability. CVE-2024-56067 WP SuperBackup = 2.3.3 - Missing Authorization to Unauthenticated Back-Up File Download Description The Super Backup & Clone - Migrate for WordPress...

WordPress SuperBackup 2.3.3 Shell Upload

WordPress SuperBackup plugin versions 2.3.3 and below suffer from a remote shell upload vulnerability. CVE-2024-56064 WP SuperBackup = 2.3.3 - Unauthenticated Arbitrary File Upload Description The Super Backup & Clone - Migrate for WordPress plugin for WordPress is vulnerable to arbitrary file...

CVE-2024-56069

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in azzaroco WP SuperBackup indeed-wp-superbackup allows Reflected XSS.This issue affects WP SuperBackup: from n/a through = 2.3.3...

CVE-2024-56069 WordPress WP SuperBackup plugin <= 2.3.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Azzaroco WP SuperBackup allows Reflected XSS.This issue affects WP SuperBackup: from n/a through 2.3.3...

CVE-2024-56069

CVE-2024-56069: Reflected XSS in WP SuperBackup (WordPress plugin) affecting WP SuperBackup

CVE-2024-56069 WordPress WP SuperBackup plugin <= 2.3.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in azzaroco WP SuperBackup indeed-wp-superbackup allows Reflected XSS.This issue affects WP SuperBackup: from n/a through = 2.3.3...