Approved changes feed: RSS · Atom

cpe:2.3:a:azzaroco:wp_superbackup:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAzzaroco (a9a5ee68-8982-53f5-879e-5e728d2337c3)
ProductWp Superbackup (b8319b75-a678-5947-bc89-44b74449a187)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-56070 vulnerable 2026-06-08 06:54:17.422406 WordPress WP SuperBackup plugin <= 2.3.3 - Multiple Subscriber+ Broken Access Control vulnerabilities
HIGH (7.4)
Missing Authorization vulnerability in azzaroco WP SuperBackup indeed-wp-superbackup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP SuperBackup: from n/a through <= 2.3.3.
Published: 2024-12-31T13:35:46.941Z
Updated: 2026-04-28T16:10:54.726Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-56069 vulnerable 2026-06-08 06:54:17.421961 WordPress WP SuperBackup plugin <= 2.3.3 - Reflected Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in azzaroco WP SuperBackup indeed-wp-superbackup allows Reflected XSS.This issue affects WP SuperBackup: from n/a through <= 2.3.3.
Published: 2025-01-02T09:12:19.543Z
Updated: 2026-04-28T16:10:54.770Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-56068 vulnerable 2026-06-08 06:54:17.421669 WordPress WP SuperBackup plugin <= 2.3.3 - Subscriber+ PHP Object Injection vulnerability
HIGH (7.5)
Deserialization of Untrusted Data vulnerability in azzaroco WP SuperBackup indeed-wp-superbackup.This issue affects WP SuperBackup: from n/a through <= 2.3.3.
Published: 2024-12-31T12:51:45.293Z
Updated: 2026-04-28T16:10:54.812Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-56067 vulnerable 2026-06-08 06:54:17.421364 WordPress WP SuperBackup plugin <= 2.3.3 - Unauthenticated Backup File Download Vulnerability
HIGH (7.5)
Missing Authorization vulnerability in azzaroco WP SuperBackup indeed-wp-superbackup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP SuperBackup: from n/a through <= 2.3.3.
Published: 2024-12-31T12:48:21.629Z
Updated: 2026-04-29T09:51:53.765Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-56064 vulnerable 2026-06-08 06:54:17.417771 WordPress WP SuperBackup plugin <= 2.3.3 - Unauthenticated Arbitrary File Upload vulnerability
CRITICAL (10)
Unrestricted Upload of File with Dangerous Type vulnerability in azzaroco WP SuperBackup indeed-wp-superbackup allows Upload a Web Shell to a Web Server.This issue affects WP SuperBackup: from n/a through <= 2.3.3.
Published: 2024-12-31T12:54:21.074Z
Updated: 2026-04-28T16:10:54.719Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.