Approved changes feed: RSS · Atom

cpe:2.3:a:softaculous:backuply:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorSoftaculous (65f23925-db99-5043-a6d0-39da9bceb2f5)
ProductBackuply (75f1f047-c683-5e4a-8abf-2380e2c47531)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-8669 vulnerable 2026-06-03 14:58:19.098922 Backuply – Backup, Restore, Migrate and Clone <= 1.3.4 - Authenticated (Admin+) SQL Injection
CRITICAL (9.1)
The Backuply – Backup, Restore, Migrate and Clone plugin for WordPress is vulnerable to SQL Injection via the 'options' parameter passed to the backuply_wp_clone_sql() function in all versions up to, and including, 1.3.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
Published: 2024-09-14T03:30:05.621Z
Updated: 2026-04-08T16:58:46.903Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0842 vulnerable 2026-06-03 14:54:04.310792 Backuply - Backup, Restore, Migrate and Clone <= 1.2.6 - Denial of Service
HIGH (7.5)
The Backuply – Backup, Restore, Migrate and Clone plugin for WordPress is vulnerable to Denial of Service in all versions up to, and including, 1.2.6. This is due to direct access of the backuply/restore_ins.php file and. This makes it possible for unauthenticated attackers to make excessive requests that result in the server running out of resources.
Published: 2024-02-09T04:31:54.615Z
Updated: 2026-04-08T16:41:02.852Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0697 vulnerable 2026-06-03 14:54:03.296312 Backuply – Backup, Restore, Migrate and Clone <= 1.2.3 - Authenticated (Administrator+) Directory Traversal
MEDIUM (6.5)
The Backuply – Backup, Restore, Migrate and Clone plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.2.3 via the node_id parameter in the backuply_get_jstree function. This makes it possible for attackers with administrator privileges or higher to read the contents of arbitrary files on the server, which can contain sensitive information.
Published: 2024-01-27T04:31:29.644Z
Updated: 2026-04-08T17:00:27.088Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.