Extension WordPress
Vulnérabilités JetBackup – Backup, Restore & Migrate
Cette page rassemble les failles publiées pour JetBackup – Backup, Restore & Migrate, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de JetBackup – Backup, Restore & Migrate
10 fiches
JetBackup <= 3.1.19.8 – Authenticated (Administrator+) Arbitrary Directory Deletion via Path Traversal in 'fileName' Parameter
The JetBackup – Backup, Restore & Migrate plugin for WordPress is vulnerable to Path Traversal leading to Arbitrary Directory Deletion in versions up to and including 3.1.19.8. This is due to insufficient input validation on the fileName parameter…
*-3.1.19.8
3.1.20.3
16/04/2026
JetBackup <= 2.0.9.7 – Sensitive Information Exposure via Directory Listing
The JetBackup – WP Backup, Migrate & Restore plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.0.9.7 via directory listing. This makes it possible for unauthenticated attackers to obtain backups…
*-2.0.9.7
2.0.9.9
02/02/2024
Backup Guard <= 1.6.9 – Authenticated (Administrator+) Stored Cross-Site Scripting
The Backup Guard plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.6.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and…
*-1.6.9
1.6.9.1
27/10/2022
Backup Guard <= 1.5.9 – Authenticated Arbitrary File Upload
The WordPress Backup and Migrate Plugin – Backup Guard WordPress plugin before 1.6.0 did not ensure that the imported files are of the SGBP format and extension, allowing high privilege users (admin+) to upload arbitrary files, including PHP…
*-1.5.9
1.6.0
18/02/2021
JetBackup – WP Backup, Migrate & Restore <= 1.4.1 – Missing Authorization to Unauthorized Backup Location Change
The JetBackup – WP Backup, Migrate & Restore plugin for WordPress is vulnerable to unauthorized back-up location changes in versions up to, and including 1.4.1 due to a lack of proper capability checking on the backup_guard_cloud_dropbox, backup_guard_cloud_gdrive, and…
*-1.4.0
1.4.1
30/07/2020
JetBackup – WP Backup, Migrate & Restore <= 1.4.0 – Sensitive Information Disclosure
The JetBackup – WP Backup, Migrate & Restore plugin for WordPress is vulnerable to sensitive information disclosure in versions up to, and including, 1.4.0 due to a lack of proper capability checking on the backup_guard_get_manual_modal function called via…
*-1.4.0
1.4.1
30/07/2020
JetBackup – WP Backup, Migrate & Restore <= 1.3.9 – Cross-Site Request Forgery to Arbitrary File Upload
The JetBackup – WP Backup, Migrate & Restore plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including 1.3.9. This is due to missing nonce validation on the backup_guard_get_import_backup() function. This makes it…
*-1.3.9
1.4.0
16/07/2020
BackupGuard <= 1.1.46 – Reflected Cross-Site Scripting
Cross-site scripting vulnerability in BackupGuard prior to version 1.1.47 allows an attacker to inject arbitrary web script or HTML via unspecified vectors.
*-1.1.46
1.1.47
24/08/2017
Backup Guard <= 1.1.46 – Cross-Site Scripting
The Backup Guard plugin before 1.1.47 for WordPress has multiple XSS issues.
[*, 1.1.47)
1.1.47
11/08/2017
WordPress Backup and Migrate Plugin – Backup Guard < 1.0.3 – Arbitrary File Upload
The WordPress Backup and Migrate Plugin – Backup Guard plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the backup_guard_get_import_backup() function in versions up to, and including, 1.0.2. This makes it…
[*, 1.0.3)
1.0.3
15/02/2016
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.