CVE-2023-5737

CVE-2023-5737 affects WordPress Backup & Migration plugin

CVE-2023-5738

CVE-2023-5738 affects WordPress Backup & Migration (plugin up to v1.4.4). Root cause: failure to sanitise/escape certain parameters, enabling Cross-Site Scripting by a Subscriber+ user; confirmed stored XSS path via admin-ajax. Patch availability: fixed in v1.4.5; mitigate by upgrading to 1.4.5 o...

CVE-2024-31254

Technical details are not publicly provided in the supplied documents. No specifics on affected versions beyond 1.4.7, root cause, exploitability, or remediation are present. Monitor for updates.