Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
2.7
CVE-2024-3034
- EPSS 0.56%
- Published 27.04.2024 05:15:48
- Last modified 21.11.2024 09:28:43
The BackUpWordPress plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 3.13 via the hmbkp_directory_browse parameter. This makes it possible for authenticated attackers, with administrator-level access and...
4.3
CVE-2022-4931
- EPSS 0.09%
- Published 07.03.2023 15:15:10
- Last modified 21.11.2024 07:36:16
The BackupWordPress plugin for WordPress is vulnerable to information disclosure in versions up to, and including 3.12. This is due to missing authorization on the heartbeat_received() function that triggers on WordPress heartbeat. This makes it poss...
1