Plugin icon

Backup Migration

backup-backup

Vulnerabilities:

15

Last Updated:

April 21, 2026

Active Installs:

90000

Published
Title
Fixed in
CVSS
Published
2026-04-08
Title
BackupBliss – Backup & Migration with Free Cloud Storage < 2.1.2 - Unauthenticated Information Exposure
Fixed in
Fixed in 2.1.2
CVSS
5.3 (medium)
Published
2026-04-06
Title
Backup Migration < 2.1.0 - Missing Authorization to Unauthenticated Backup Upload to Offline Storage
Fixed in
Fixed in 2.1.0
CVSS
5.3 (medium)
Published
2025-11-03
Title
Backup Migration < 2.0.0 - Unauthenticated Backup Download
Fixed in
Fixed in 2.0.0
CVSS
5.9 (medium)
Published
2025-01-03
Title
Backup Migration < 1.4.6.1 - Unauthenticated PHP Object Injection via 'recursive_unserialize_replace'
Fixed in
Fixed in 1.4.6.1
CVSS
8.8 (high)
Published
2024-04-17
Title
Backup Migration < 1.4.4 - Information Exposure via Log Files
Fixed in
Fixed in 1.4.4
CVSS
5.3 (medium)
Published
2023-12-22
Title
Backup Migration < 1.4.0 - Unauthenticated Path Traversal to Arbitrary File Deletion
Fixed in
Fixed in 1.4.0
CVSS
7.5 (high)
Published
2023-12-22
Title
Backup Migration < 1.4.0 - Authenticated (Admin+) OS Command Injection via url
Fixed in
Fixed in 1.4.0
CVSS
6.6 (medium)
Published
2023-12-22
Title
Backup Migration 1.0.8 - 1.3.9 - Remote File Inclusion via content-dir
Fixed in
Fixed in 1.4.0
CVSS
8.1 (high)
Published
2023-12-11
Title
Backup Migration < 1.3.8 - Unauthenticated RCE
Fixed in
Fixed in 1.3.8
CVSS
9.8 (critical)
Published
2023-12-07
Title
Backup Migration Staging < 1.3.6 - Sensitive Data Exposure
Fixed in
Fixed in 1.3.6
CVSS
8.2 (high)
Published
2023-11-30
Title
Backup Migration < 1.3.7 - Unauthenticated Arbitrary File Download to Sensitive Information Exposure
Fixed in
Fixed in 1.3.7
CVSS
7.5 (high)
Published
2023-09-05
Title
Backup Migration < 1.3.0 - Cross-Site Request Forgery
Fixed in
Fixed in 1.3.0
CVSS
4.3 (medium)
Published
2023-07-27
Title
Multiple Plugins from Inisev - Plugin Installation via CSRF
Fixed in
Fixed in 1.2.8
CVSS
4.3 (medium)
Published
2023-07-27
Title
Multiple Plugins from Inisev - Subscriber+ Plugin Installation
Fixed in
Fixed in 1.2.8
CVSS
4.3 (medium)
Published
2021-11-17
Title
Backup Migration < 1.1.6 - Admin+ Stored Cross-Site Scripting
Fixed in
Fixed in 1.1.6
CVSS
4.8 (medium)