BackupBliss Backup Migration

Backup Migration <= 1.3.7 - Unauthenticated Remote Code Execution

The Backup Migration plugin for WordPress is vulnerable to Remote File Inclusion in versions 1.0.8 to 1.3.9 via the 'content-dir' HTTP header. This makes it possible for unauthenticated attackers to include remote files on the server, resulting in code execution. NOTE: Successful exploitation of this vulnerability requires that the target server's php.ini is configured with 'allow_url_include' set to 'on'. This feature is deprecated as of PHP 7.4 and is disabled by default, but can still be explicitly enabled in later versions of PHP.

Backup Migration <= 1.3.9 - Unauthenticated Path Traversal to Arbitrary File Deletion

Backup Migration <= 1.3.6 - Unauthenticated Arbitrary Backup Download to Sensitive Information Exposure

Backup Migration Staging < 1.3.6 - Sensitive Data Exposure

Backup Migration <= 1.3.9 - Authenticated (Admin+) OS Command Injection via url

Inisev Plugins (Various Versions) - Missing Authorization on handle_installation function

WordPress Backup Migration plugin <= 1.1.5 - Authenticated Persistent Cross-Site Scripting (XSS) vulnerability

Inisev Plugins (Various Versions) - Cross-Site Request Forgery on handle_installation function