Backup Migration

Software Type	Plugin
Software Slug	backup-backup (view on wordpress.org)
Software Status	Active
Software Author	inisev
Software Website	backupbliss.com
Software Downloads	1,462,887
Software Active Installs	80,000
Software Record Last Updated	May 18, 2024

13 Vulnerabilities

Backup Migration <= 1.3.9 - Unauthenticated Path Traversal to Arbitrary File Deletion

9.8

CVE-2023-6972

Dec 22, 2023

Researcher: Hiroho Shimada

Backup Migration <= 1.3.7 - Unauthenticated Remote Code Execution

9.8

CVE-2023-6553

Dec 11, 2023

Researcher: Nex Team

Backup Migration <= 1.3.5 - Unauthenticated Sensitive Information Exposure

9.8

CVE-2023-6271

Dec 7, 2023

Researcher: Dmitrii Ignatyev

Backup Migration 1.0.8 - 1.3.9 - Remote File Inclusion via content-dir

8.1

CVE-2023-6971

Dec 22, 2023

Researcher: Hiroho Shimada

Backup Migration <= 1.3.6 - Unauthenticated Arbitrary File Download to Sensitive Information Exposure

7.5

CVE-2023-6266

Nov 30, 2023

Researcher: Rafshanzani Suhada

Backup Migration <= 1.2.8 - Sensitive Information Exposure

7.5

CVE ID Unknown

May 10, 2023

Researcher: Wadeek

Backup Migration <= 1.3.9 - Authenticated (Admin+) OS Command Injection via url

7.2

CVE-2023-7002

Dec 22, 2023

Researcher: Françoa Taffarel

Backup Migration <= 1.1.5 - Authenticated (Admin+) Stored Cross-Site Scripting

5.5

CVE-2021-36884

Nov 17, 2021

Researcher: Vladislav Pokrovsky (ΞX.MI)

Backup Migration <= 1.4.3 - Information Exposure via Log Files

5.3

CVE-2024-32686

Apr 17, 2024

Researcher: emad

Inisev Analyst Module <= Various Versions - Missing Authorization

4.3

CVE-2024-31435

Apr 10, 2024

Researcher: Dhabaleshwar Das

Backup Migration <= 1.2.9 - Cross-Site Request Forgery

4.3

CVE ID Unknown

Sep 5, 2023

Researchers:

Inisev Plugins (Various Versions) - Cross-Site Request Forgery on handle_installation function

4.3

CVE-2023-3977

Jul 27, 2023

Researcher: Chloe Chamberland

Inisev Plugins (Various Versions) - Missing Authorization on handle_installation function

4.3

CVE-2023-0958

Jul 27, 2023

Researcher: Chloe Chamberland

Title	Status	CVE ID	CVSS	Researchers	Date
Backup Migration <= 1.3.9 - Unauthenticated Path Traversal to Arbitrary File Deletion	Patched	CVE-2023-6972	9.8	Hiroho Shimada	December 22, 2023
Backup Migration <= 1.3.7 - Unauthenticated Remote Code Execution	Patched	CVE-2023-6553	9.8	Nex Team	December 11, 2023
Backup Migration <= 1.3.5 - Unauthenticated Sensitive Information Exposure	Patched	CVE-2023-6271	9.8	Dmitrii Ignatyev	December 7, 2023
Backup Migration 1.0.8 - 1.3.9 - Remote File Inclusion via content-dir	Patched	CVE-2023-6971	8.1	Hiroho Shimada	December 22, 2023
Backup Migration <= 1.3.6 - Unauthenticated Arbitrary File Download to Sensitive Information Exposure	Patched	CVE-2023-6266	7.5	Rafshanzani Suhada	November 30, 2023
Backup Migration <= 1.2.8 - Sensitive Information Exposure	Patched		7.5	Wadeek	May 10, 2023
Backup Migration <= 1.3.9 - Authenticated (Admin+) OS Command Injection via url	Patched	CVE-2023-7002	7.2	Françoa Taffarel	December 22, 2023
Backup Migration <= 1.1.5 - Authenticated (Admin+) Stored Cross-Site Scripting	Patched	CVE-2021-36884	5.5	Vladislav Pokrovsky (ΞX.MI)	November 17, 2021
Backup Migration <= 1.4.3 - Information Exposure via Log Files	Patched	CVE-2024-32686	5.3	emad	April 17, 2024
Inisev Analyst Module <= Various Versions - Missing Authorization	Patched	CVE-2024-31435	4.3	Dhabaleshwar Das	April 10, 2024
Backup Migration <= 1.2.9 - Cross-Site Request Forgery	Patched		4.3		September 5, 2023
Inisev Plugins (Various Versions) - Cross-Site Request Forgery on handle_installation function	Patched	CVE-2023-3977	4.3	Chloe Chamberland	July 27, 2023
Inisev Plugins (Various Versions) - Missing Authorization on handle_installation function	Patched	CVE-2023-0958	4.3	Chloe Chamberland	July 27, 2023

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation