| CVE-2024-8767 | Acronis多款产品 安全漏洞 | Acronis | Acronis Backup plugin for cPanel & WHM | 中危 | - | 2024-09-17 08:51:29 | Deep Dive |
| CVE-2023-5505 | BackWPup <= 4.0.1 - Authenticated (Administrator+) Directory Traversal | wp_media | BackWPup – WordPress Backup & Restore Plugin | Medium | 6.8 | 2024-08-17 08:37:24 | Deep Dive |
| CVE-2024-6559 | XCloner <= 4.7.3 - Unauthenticated Full Path Disclosure | watchful | Backup, Restore and Migrate your sites with XCloner | Medium | 5.3 | 2024-07-16 06:43:31 | Deep Dive |
| CVE-2024-6210 | Duplicator <= 1.5.9 - Full Path Disclosure | smub | Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More | Medium | 5.3 | 2024-07-11 02:03:49 | Deep Dive |
| CVE-2024-5551 | WP STAGING PRO - Backup Duplicator & Migration <= 5.6.0 - Cross-Site Request Forgery to Limited Local File Inclusion | WPStaging | WP STAGING Pro WordPress Backup Plugin | High | 7.5 | 2024-06-14 05:39:14 | Deep Dive |
| CVE-2024-4469 | Migration Backup Restore < 3.5.0 - Admin+ SSRF | Unknown | WP STAGING WordPress Backup Plugin | 中危 | - | 2024-05-31 06:00:02 | Deep Dive |
| CVE-2024-3412 | WP STAGING WordPress Backup Plugin – Migration Backup Restore <= 3.4.3 - Authenticated (Admin+) Arbitrary File Upload | renehermi | WP STAGING – WordPress Backup, Restore & Migration | Critical | 9.1 | 2024-05-29 08:30:06 | Deep Dive |
| CVE-2024-3682 | WP STAGING <= 3.4.3 and WP STAGING Pro <= 5.4.3 - Sensitive Information Exposure via Log File | renehermi | WP STAGING – WordPress Backup, Restore & Migration | Medium | 5.3 | 2024-04-26 09:29:52 | Deep Dive |
| CVE-2024-2309 | WP Staging < 3.4.0, 5.4.0 (Pro Version) - Admin+ Stored XSS | Unknown | WP STAGING WordPress Backup Plugin | - | - | 2024-04-17 05:00:03 | Deep Dive |
| CVE-2023-51681 | WordPress Duplicator Plugin <= 1.5.7 is vulnerable to Cross Site Request Forgery (CSRF) | Duplicator | Duplicator – WordPress Migration & Backup Plugin | Medium | 6.5 | 2024-02-28 16:41:37 | Deep Dive |
| CVE-2023-5775 | BackWPup <= 4.0.2 - Plaintext Storage of Backup Destination Password | wp_media | BackWPup – WordPress Backup & Restore Plugin | Low | 2.2 | 2024-02-24 08:38:15 | Deep Dive |
| CVE-2023-7204 | WP STAGING WordPress Backup Plugin < 3.2.0 - Unauthorized Sensitive Data Exposure | Unknown | WP STAGING WordPress Backup Plugin | 高危 | - | 2024-01-29 14:44:21 | Deep Dive |
| CVE-2023-5504 | BackWPup <= 4.0.1 - Authenticated (Administrator+) Directory Traversal | wp_media | BackWPup – WordPress Backup & Restore Plugin | High | 8.7 | 2024-01-11 08:33:07 | Deep Dive |
| CVE-2023-6113 | WP Staging (Free < 3.1.3, Pro < 5.1.3) - Unauthenticated Backup Download | Unknown | WP STAGING WordPress Backup Plugin | 中危 | - | 2024-01-01 14:18:59 | Deep Dive |
| CVE-2023-52185 | WordPress Everest Backup Plugin <= 2.1.9 is vulnerable to Sensitive Data Exposure | Everestthemes | Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin | Medium | 5.3 | 2023-12-31 16:50:39 | Deep Dive |
| CVE-2023-5982 | UpdraftPlus <= 1.23.10 - Cross-Site Request Forgery to Google Drive Storage Update | davidanderson | UpdraftPlus: WP Backup & Migration Plugin | Medium | 5.4 | 2023-11-07 20:31:57 | Deep Dive |
| CVE-2023-32960 | WordPress UpdraftPlus Plugin <= 1.23.3 is vulnerable to Cross Site Request Forgery (CSRF) | UpdraftPlus.Com, DavidAnderson | UpdraftPlus WordPress Backup Plugin | High | 7.1 | 2023-06-22 12:51:42 | Deep Dive |
| CVE-2022-4932 | Total Upkeep <= 1.14.13 - Missing Authorization to Authenticated (Subscriber+) Information Disclosure | boldgrid | Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid | Medium | 4.3 | 2023-03-07 14:47:47 | Deep Dive |
| CVE-2022-38079 | WordPress Backup Scheduler plugin <= 1.5.13 - Cross-Site Request Forgery (CSRF) vulnerability | SedLex | Backup Scheduler (WordPress plugin) | Medium | 5.4 | 2022-09-23 18:35:40 | Deep Dive |
| CVE-2022-36917 | Jenkins Google Cloud Backup Plugin 安全漏洞 | Jenkins project | Jenkins Google Cloud Backup Plugin | 中危 | - | 2022-07-27 14:28:21 | Deep Dive |