Threat Entry Updated 2025-04-08

CVE-2024-31254 - Backup And Migration Plugin

Insertion of Sensitive Information into Log File vulnerability in WebToffee WordPress Backup & Migration.This issue affects WordPress Backup & Migration: from n/a through 1.4.7.

PLUGIN Backup And Migration

CVE-2024-31254

LOW CVSS 3.7 2024-04-10

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2024-11-21

CVE-2023-5738 - Backup And Migration Plugin

The WordPress Backup & Migration WordPress plugin before 1.4.4 does not sanitise and escape some parameters, which could allow users with a role as low as Subscriber to perform Cross-Site Scripting attacks.

PLUGIN Backup And Migration

CVE-2023-5738

MEDIUM CVSS 5.4 2023-11-27

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2024-11-21

CVE-2023-5737 - Backup And Migration Plugin

The WordPress Backup & Migration WordPress plugin before 1.4.4 does not authorize some AJAX requests, allowing users with a role as low as Subscriber to update some plugin settings.

PLUGIN Backup And Migration

CVE-2023-5737

MEDIUM CVSS 4.3 2023-11-27

Risk Score

Open Full Technical Breakdown