High
CVE-2021-24307
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 494
Reset filters
Medium
CVE-2021-24423
UpdraftPlus WordPress Backup Plugin < 1.6.59 - Stored Cross-Site Scripting
High
CVE-2021-24173
VM Backups <= 1.0 - Cross-Site Request Forgery to Cross-Site Scripting
Medium
CVE-2021-24172
VM Backups <= 1.0 - Cross-Site Request Forgery
High
CVE-2021-24174
Database Backups <= 1.2.2.6 - Cross-Site Request Forgery
Medium
CVE-2021-4422
POST SMTP Mailer <= 2.0.20 - Cross-Site Request Forgery Bypass
High
CVE-2021-24155
Backup Guard <= 1.5.9 - Authenticated Arbitrary File Upload
High
7934c73c-17cf-4cec-a8da-654cee453b8f
Backup by Supsystic <= 2.3.11 - Cross-Site Request Forgery to Arbitrary File Download/Deletion
High
CVE-2020-36848
Total Upkeep by BoldGrid <= 1.14.9 - Unauthenticated Backup Download
Medium
CVE-2015-9360
UpdraftPlus <= 1.9.63 and UpdraftPlus (paid) <= 2.9.63 - Cross-Site Scripting
Critical
CVE-2020-35950
Backup, Restore and Migrate WordPress Sites With the XCloner Plugin <= 4.2.152 - Cross-Site Request Forgery
High
CVE-2020-35948
Backup, Restore and Migrate WordPress Sites With the XCloner Plugin 4.2.1 - 4.2.12 - Unprotected AJAX Actions
High
CVE-2020-24312
WP File Manager <= 6.4 - Unauthenticated Resource Access to Site Backups
Medium
CVE-2020-36667
JetBackup – WP Backup, Migrate & Restore <= 1.4.1 - Missing Authorization to Unauthorized Backup Location Change
Medium
CVE-2020-36668
JetBackup – WP Backup, Migrate & Restore <= 1.4.0 - Sensitive Information Disclosure
High
CVE-2020-36669
JetBackup – WP Backup, Migrate & Restore <= 1.3.9 - Cross-Site Request Forgery to Arbitrary File Upload
Medium
CVE-2020-36835
Migration, Backup, Staging – WPvivid <= 0.9.35 - Sensitive Information Disclosure
High
CVE-2020-36842
Migration, Backup, Staging – WPvivid <= 0.9.35 - Authenticated (Subscriber+) Arbitrary File Upload
High
Exploited in attacks
CVE-2020-11738
Duplicator < 1.3.28 - Directory Traversal
High
CVE-2020-7241
WP Database Backup <= 5.5 - Unauthenticated Information Disclosure
Medium
f373a1d5-3d7e-4a0a-af03-28ca6ce6a170
All-in-One WP Migration <= 7.14 - Unauthenticated Backup Download
Critical
CVE-2020-8771
Backup and Staging by WP Time Capsule <= 1.21.15 - Authentication Bypass
Medium
5287cf42-6d0a-4fd2-943d-e8e44fc08576
Jetpack <= 7.9 - Stored Cross-Site Scripting
Critical
6fb01045-d38f-469f-8aaf-ff8882132acc
iThemes Sync <= 2.0.17 - Authentication Bypass
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.