Approved changes feed: RSS · Atom

cpe:2.3:a:backupbliss:wordpress_plugin_backup_migration:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBackupbliss (e3736e6e-97c2-5df6-bfd1-f100759cab8d)
ProductWordpress Plugin Backup Migration (64fad6ef-b997-5983-bc83-b536c451f8b0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-54346 vulnerable 2026-06-08 06:19:40.569132 WordPress Plugin Backup Migration 1.2.8 Unauthenticated Database Backup Download
HIGH (7.5)
WordPress Plugin Backup Migration 1.2.8 contains an information disclosure vulnerability that allows unauthenticated attackers to download complete database backups by accessing predictable file paths. Attackers can enumerate backup directories through configuration files and complete logs, then construct direct download URLs to retrieve sensitive backup archives containing full database dumps.
Published: 2026-05-05T11:24:50.282Z
Updated: 2026-07-15T01:24:57.710Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.