Skip to main content

Inpsyde

3 CVEs vendor

Monthly

CVE-2023-5775 Feb 26, 16:27 LOW PATCH Monitor

The BackWPup plugin for WordPress is vulnerable to Plaintext Storage of Backup Destination Password in all versions up to, and including, 4.0.2. Rated low severity (CVSS 2.2), this vulnerability is remotely exploitable.

WordPress Information Disclosure Backwpup Wordpress Plugin Inpsyde
NVD VulDB
CVSS 3.1
2.2
EPSS
0.2%
CVE-2023-5504 Jan 11, 09:15 HIGH PATCH This Week

The BackWPup plugin for WordPress is vulnerable to Directory Traversal in versions up to, and including, 4.0.1 via the Log File Folder. Rated high severity (CVSS 8.7), this vulnerability is remotely exploitable, low attack complexity. This Path Traversal vulnerability could allow attackers to access files and directories outside the intended path.

PHP WordPress Path Traversal Backwpup Wordpress Plugin +1
NVD VulDB
CVSS 3.1
8.7
EPSS
0.5%
CVE-2017-2551 Sep 28, 01:29 HIGH POC This Week

Vulnerability in Wordpress plugin BackWPup before v3.4.2 allows possible brute forcing of backup file for download. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

WordPress Information Disclosure Path Traversal Backwpup Wordpress Plugin +1
NVD
CVSS 3.0
7.5
EPSS
0.6%
EPSS 0% CVSS 2.2
LOW PATCH Monitor

The BackWPup plugin for WordPress is vulnerable to Plaintext Storage of Backup Destination Password in all versions up to, and including, 4.0.2. Rated low severity (CVSS 2.2), this vulnerability is remotely exploitable.

WordPress Information Disclosure Backwpup +2
NVD VulDB
EPSS 1% CVSS 8.7
HIGH PATCH This Week

The BackWPup plugin for WordPress is vulnerable to Directory Traversal in versions up to, and including, 4.0.1 via the Log File Folder. Rated high severity (CVSS 8.7), this vulnerability is remotely exploitable, low attack complexity. This Path Traversal vulnerability could allow attackers to access files and directories outside the intended path.

PHP WordPress Path Traversal +3
NVD VulDB
EPSS 1% CVSS 7.5
HIGH POC This Week

Vulnerability in Wordpress plugin BackWPup before v3.4.2 allows possible brute forcing of backup file for download. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

WordPress Information Disclosure Path Traversal +3
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy