CVE-2020-36848

概要

参考情報

• plugins.trac.wordpress.org/changeset/2439376/boldgrid-backup · Patch
• raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/auxiliary/scanner/http/wp_total_upkeep_downloader.rb · Exploit
• wpscan.com/vulnerability/d35c19d9-8586-4c5b-9a01-44739cbeee19 · Exploit
• wordfence.com/threat-intel/vulnerabilities/id/86a5adaf-02b7-4b42-a048-8bc01f07656b · Third Party Advisory

total upkeep のその他の脆弱性

• CVE-2025-2257高 7.2The Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid plugin for WordPress is vulnerable to Remote Code Execution in…
• CVE-2024-13907中 6.5The Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid plugin for WordPress is vulnerable to Server-Side Request Forg…
• CVE-2024-9461高 7.2The Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid plugin for WordPress is vulnerable to Remote Code Execution in…
• CVE-2024-24869高 7.5Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in BoldGrid Total Upkeep allows Relative Path T…
• CVE-2022-4932中 4.3The Total Upkeep plugin for WordPress is vulnerable to information disclosure in versions up to, and including 1.14.13. This is due to missi…