Backupbliss – Backup & Migration With Free Cloud Storage
Approved changes feed: RSS · Atom
cpe:2.3:a:inisev:backupbliss_–_backup_&_migration_with_free_cloud_storage:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Inisev (f56a1d9c-c546-5c00-839e-72dda3ed8869) |
|---|---|
| Product | Backupbliss – Backup & Migration With Free Cloud Storage (1a82c4f0-02b0-5428-99ee-27df99980e38) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-14944 |
vulnerable | 2026-06-08 07:06:35.407987 | db.gcve.eu details are currently unavailable. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-10932 |
vulnerable | 2026-06-08 06:23:48.168678 |
Backup Migration <= 1.4.6 - Unauthenticated PHP Object Injection via 'recursive_unserialize_replace'
HIGH (8.8)
The Backup Migration plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.4.6 via deserialization of untrusted input in the 'recursive_unserialize_replace' function. This makes it possible for unauthenticated attackers to inject a PHP Object. The additional presence of a POP chain allows attackers to delete arbitrary files, retrieve sensitive data, or execute code. An administrator must create a staging site in order to trigger the exploit.
Published: 2025-01-04T07:24:24.347Z
Updated: 2026-04-08T17:26:11.405Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-7002 |
vulnerable | 2026-06-08 06:21:56.575957 |
Backup Migration <= 1.3.9 - Authenticated (Admin+) OS Command Injection via url
HIGH (7.2)
The Backup Migration plugin for WordPress is vulnerable to OS Command Injection in all versions up to, and including, 1.3.9 via the 'url' parameter. This vulnerability allows authenticated attackers, with administrator-level permissions and above, to execute arbitrary commands on the host operating system.
Published: 2023-12-23T01:59:51.281Z
Updated: 2026-04-08T17:23:43.101Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6972 |
vulnerable | 2026-06-08 06:21:56.505245 |
Backup Migration <= 1.3.9 - Unauthenticated Path Traversal to Arbitrary File Deletion
CRITICAL (9.8)
The Backup Migration plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.3.9 via the 'content-backups' and 'content-name', 'content-manifest', or 'content-bmitmp' and 'content-identy' HTTP headers. This makes it possible for unauthenticated attackers to delete arbitrary files, including the wp-config.php file, which can make site takeover and remote code execution possible.
Published: 2023-12-23T01:59:46.751Z
Updated: 2026-04-08T16:34:37.988Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6553 |
vulnerable | 2026-06-08 06:21:54.831703 |
Backup Migration <= 1.3.7 - Unauthenticated Remote Code Execution
CRITICAL (9.8)
The Backup Migration plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.3.7 via the /includes/backup-heart.php file. This is due to an attacker being able to control the values passed to an include, and subsequently leverage that to achieve remote code execution. This makes it possible for unauthenticated attackers to easily execute code on the server.
Published: 2023-12-15T10:59:46.387Z
Updated: 2026-04-08T16:45:52.697Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6266 |
vulnerable | 2026-06-08 06:19:46.807597 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-3977 |
vulnerable | 2026-06-08 06:09:40.939060 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0958 |
vulnerable | 2026-06-08 05:52:33.518328 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.