Vulnerabilities > Backup Guard

DATE CVE VULNERABILITY TITLE RISK
2021-04-05 CVE-2021-24155 Unrestricted Upload of File with Dangerous Type vulnerability in Backup-Guard Backup Guard
The WordPress Backup and Migrate Plugin – Backup Guard WordPress plugin before 1.6.0 did not ensure that the imported files are of the SGBP format and extension, allowing high privilege users (admin+) to upload arbitrary files, including PHP ones, leading to RCE.
network
low complexity
backup-guard CWE-434
6.5
2019-08-13 CVE-2017-18488 Cross-site Scripting vulnerability in Backup-Guard Backup Guard
The Backup Guard plugin before 1.1.47 for WordPress has multiple XSS issues.
4.3
2017-08-29 CVE-2017-10837 Cross-site Scripting vulnerability in Backup-Guard Backup Guard
Cross-site scripting vulnerability in BackupGuard prior to version 1.1.47 allows an attacker to inject arbitrary web script or HTML via unspecified vectors.
4.3