Backup Guard

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:backup-guard:backup_guard:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorBackup Guard (e63985dd-d2c7-56fa-ad6d-9db9b245822f)
ProductBackup Guard (ca044f17-0023-52fd-8cb9-3efc0e4ef7d8)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-24155 vulnerable 2026-06-08 05:30:03.881563 Backup Guard < 1.6.0 - Authenticated Arbitrary File Upload
The WordPress Backup and Migrate Plugin – Backup Guard WordPress plugin before 1.6.0 did not ensure that the imported files are of the SGBP format and extension, allowing high privilege users (admin+) to upload arbitrary files, including PHP ones, leading to RCE.
Published: 2021-04-05T18:27:42.000Z
Updated: 2024-08-03T19:21:18.269Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-18488 vulnerable 2026-06-08 05:09:11.158986 Details available
The Backup Guard plugin before 1.1.47 for WordPress has multiple XSS issues.
Published: 2019-08-13T17:53:14.000Z
Updated: 2024-08-05T21:20:51.279Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-10837 vulnerable 2026-06-08 05:08:36.364639 Details available
Cross-site scripting vulnerability in BackupGuard prior to version 1.1.47 allows an attacker to inject arbitrary web script or HTML via unspecified vectors.
Published: 2017-08-28T20:00:00.000Z
Updated: 2024-08-05T17:50:12.126Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.