Boldgrid

Total Upkeep

7 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2020-36848

Exploit
  • EPSS 60.68%
  • Published 12.07.2025 11:23:39
  • Last modified 29.07.2025 20:38:40

The Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.14.9 via the env-info.php and restore-info.json files. This mak...

9.2

CVE-2025-34084

  • EPSS 0.23%
  • Published 09.07.2025 00:49:52
  • Last modified 16.07.2025 16:15:26

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority as it is a duplicate of CVE-2020-36848.

7.2

CVE-2025-2257

  • EPSS 0.6%
  • Published 26.03.2025 08:21:49
  • Last modified 22.05.2025 14:43:29

The Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.16.10 via the compression_level setting. This is due to the plugin using...

6.5

CVE-2024-13907

  • EPSS 0.08%
  • Published 27.02.2025 07:15:33
  • Last modified 11.03.2025 16:26:05

The Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.16.8 via the 'download' function. This makes it possible for authe...

7.2

CVE-2024-9461

  • EPSS 4.29%
  • Published 26.11.2024 14:15:22
  • Last modified 22.05.2025 14:27:29

The Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.16.6 via the cron_interval parameter. This is due to missing input valid...

7.5

CVE-2024-24869

  • EPSS 1.84%
  • Published 17.05.2024 09:15:23
  • Last modified 09.06.2025 20:58:11

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in BoldGrid Total Upkeep allows Relative Path Traversal.This issue affects Total Upkeep: from n/a through 1.15.8.

4.3

CVE-2022-4932

  • EPSS 0.09%
  • Published 07.03.2023 15:15:10
  • Last modified 21.11.2024 07:36:16

The Total Upkeep plugin for WordPress is vulnerable to information disclosure in versions up to, and including 1.14.13. This is due to missing authorization on the heartbeat_received() function that triggers on WordPress heartbeat. This makes it poss...