All 4 CVE vulnerabilities found in JetBackup – Backup, Restore & Migrate, with AI-generated Chinese analysis, references, and POCs.
Vendor: backupguard
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-4853 | JetBackup <= 3.1.19.8 - Authenticated (Administrator+) Arbitrary Directory Deletion via Path Traversal in 'fileName' Parameter CWE-22 | 4.9 | Medium | 2026-04-17 |
| CVE-2020-36669 | JetBackup – WP Backup, Migrate & Restore <= 1.3.9 - Cross-Site Request Forgery to Arbitrary File Upload CWE-352 | 8.8 | High | 2023-03-07 |
| CVE-2020-36668 | JetBackup – WP Backup, Migrate & Restore <= 1.4.0 - Sensitive Information Disclosure CWE-200 | 4.3 | Medium | 2023-03-07 |
| CVE-2020-36667 | JetBackup – WP Backup, Migrate & Restore <= 1.4.1 - Missing Authorization to Unauthorized Backup Location Change CWE-862 | 5.4 | Medium | 2023-03-07 |
All 4 known CVE vulnerabilities affecting JetBackup – Backup, Restore & Migrate with full Chinese analysis, references, and POCs where available.