Approved changes feed: RSS · Atom

cpe:2.3:a:webtoffee:wordpress_backup_&_migration:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorWebtoffee (e4f96395-4c7d-5ae2-a626-a2bd0042f0d9)
ProductWordpress Backup & Migration (001987f4-b412-552f-af0f-88d0797ef668)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-24651 vulnerable 2026-06-03 14:59:56.539884 WordPress WebToffee WP Backup and Migration plugin <= 1.5.3 - Sensitive Data Exposure vulnerability
MEDIUM (5.9)
Insertion of Sensitive Information into Log File vulnerability in WebToffee WordPress Backup & Migration wp-migration-duplicator allows Retrieve Embedded Sensitive Data.This issue affects WordPress Backup & Migration: from n/a through <= 1.5.3.
Published: 2025-04-17T15:48:14.409Z
Updated: 2026-04-29T09:51:54.284Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31254 vulnerable 2026-06-03 14:55:39.321217 WordPress WordPress Backup & Migration plugin <= 1.4.7 - Sensitive Data Exposure via Log File vulnerability
LOW (3.7)
Insertion of Sensitive Information into Log File vulnerability in WebToffee WordPress Backup & Migration.This issue affects WordPress Backup & Migration: from n/a through 1.4.7.
Published: 2024-04-10T15:45:11.886Z
Updated: 2026-04-28T16:09:29.111Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-52183 vulnerable 2026-06-03 14:53:38.849652 WordPress WordPress Backup & Migration plugin <= 1.4.3 - Broken Access Control vulnerability
MEDIUM (5.4)
Missing Authorization vulnerability in WebToffee WordPress Backup & Migration.This issue affects WordPress Backup & Migration: from n/a through 1.4.3.
Published: 2024-06-11T13:37:12.525Z
Updated: 2026-04-28T16:09:06.008Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-45636 vulnerable 2026-06-03 14:53:08.277986 WordPress Backup & Migration plugin <= 1.4.1 - Broken Access Control vulnerability
MEDIUM (5.4)
Missing Authorization vulnerability in WebToffee WordPress Backup & Migration wp-migration-duplicator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordPress Backup & Migration: from n/a through <= 1.4.1.
Published: 2025-01-02T11:59:52.682Z
Updated: 2026-04-29T09:51:49.532Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-33928 vulnerable 2026-06-03 14:52:15.051698 WordPress WordPress Backup & Migration plugin <= 1.4.0 - Broken Access Control vulnerability
MEDIUM (4.3)
Missing Authorization vulnerability in WebToffee WordPress Backup & Migration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordPress Backup & Migration: from n/a through 1.4.0.
Published: 2024-12-13T14:23:30.275Z
Updated: 2026-04-28T16:08:26.273Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.