Vendor
Backupbliss
13 known vulnerabilities in products by Backupbliss, 0 of them actively exploited (CISA KEV).
Key figures
13
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
3
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2023-6553 | Backup Migration <= 1.3.7 - Unauthenticated Remote Code Execution | 9.8 | |
| High | CVE-2023-7002 | Backup Migration <= 1.3.9 - Authenticated (Admin+) OS Command Injection via url | 7.2 | |
| Critical | CVE-2023-6971 | Migrate Backup Migration: File Inclusion | 8.1 | |
| Critical | CVE-2023-6972 | Backup Migration <= 1.3.9 - Unauthenticated Path Traversal to Arbitrary File Deletion | 9.8 | |
| High | CVE-2023-6266 | Inisev BackupBliss: Exposure of Sensitive Information to an Unauthorized Actor | 7.5 | |
| High | CVE-2023-6750 | Clone < 2.4.3 - Unauthenticated Backup Download | 7.5 | |
| High | CVE-2023-54346 | WordPress Plugin Backup Migration 1.2.8 Unauthenticated Database Backup Download | 7.5 | |
| High | CVE-2023-6271 | Backup Migration Staging < 1.3.6 - Sensitive Data Exposure | 7.5 | |
| Medium | CVE-2023-0958 | Inisev Plugins (Various Versions) - Missing Authorization on handle_installation function | 4.3 | |
| Medium | CVE-2023-3977 | Inisev Plugins (Various Versions) - Cross-Site Request Forgery on handle_installation function | 4.3 | |
| Medium | CVE-2021-36884 | Backupbliss Backup Migration (WordPress plugin): Cross-site Scripting | 4.8 | |
| High | CVE-2024-43297 | WordPress Clone plugin <= 2.4.5 - Broken Access Control vulnerability | 4.3 | |
| High | CVE-2024-43298 | WordPress Clone plugin <= 2.4.5 - Broken Access Control vulnerability | 4.3 |
Products
| BackupBliss | 9 | 0 |
| Migrate Clone | 5 | 0 |