Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 494
Reset filtersAll-in-One WP Migration <= 2.0.4 - Missing Authorization to Database Export
Duplicator < 0.5.10 - Arbitrary Backup Creation and Download
UpdraftPlus WordPress Backup Plugin <= 1.9.50 - Nonce Leak to Authorization Bypass
WordPress Backup to Dropbox < 4.1 - Reflected Cross-Site Scripting
DB Backup < 5.0 - Directory Traversal
Backup and Restore WordPress – Backup Plugin <= 1.9 - Authorization Bypass
All-in-One WP Migration <= 2.0.2 - Authorization Bypass to Arbitrary File Upload
Database Backup for WordPress <= 2.2.4 - Missing Authorization
Backup, Restore and Migrate WordPress Sites With the XCloner Plugin <= 3.1.1 - Sensitive Information Disclosure
Backup, Restore and Migrate WordPress Sites With the XCloner Plugin <= 3.1.1 - Remote Code Execution
Backup, Restore and Migrate WordPress Sites With the XCloner Plugin <= 3.1.1 - Directory Traversal
Backup, Restore and Migrate WordPress Sites With the XCloner Plugin <= 3.1.1 - Improper Access Control to Information Disclosure
Backup, Restore and Migrate WordPress Sites With the XCloner Plugin <= 3.1.1 - Sensitive Information Disclosure
WP-DBManager < 2.72 - OS Command Injection
BulletProof Security < .52.5 - Cross-Site Scripting
Jetpack < 2.9.3 - Security Bypass
EZPZ One Click Backup <= 12.03.10 - Unauthenticated Command Injection
Duplicator – WordPress Migration Plugin <= 0.4.4 - Cross-Site Scripting
Backup and Restore WordPress – Backup Plugin <= 1.9 - Sensitive Information Disclosure
Backup, Restore and Migrate WordPress Sites With the XCloner Plugin <= 3.1.0 - Multiple Cross-Site Request Forgery
Backup, Restore and Migrate WordPress Sites With the XCloner Plugin <= 3.1.0 - Cross-Site Request Forgery
Acunetix WP Security <= 4.0.4 - Cross-Site Request Forgery
BackWPup < 3.0.13 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.