CVE-2021-36884

Description

References

• patchstack.com/database/vulnerability/backup-backup/wordpress-backup-migration-plugin-1-1-5-authenticated-persistent-cross-site-scripting-xss-vulnerability · Patch
• wordpress.org/plugins/backup-backup · Third Party Advisory

backup migration 的其他漏洞

• CVE-2023-6266高危 7.5The Backup Migration plugin for WordPress is vulnerable to unauthorized access of data due to insufficient path and file validation on the B…
• CVE-2023-6271高危 7.5The Backup Migration WordPress plugin before 1.3.6 stores in-progress backups information in easy to find, publicly-accessible files, which …
• CVE-2023-7002高危 7.2The Backup Migration plugin for WordPress is vulnerable to OS Command Injection in all versions up to, and including, 1.3.9 via the 'url' p…
• CVE-2023-6972严重 9.8The Backup Migration plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.3.9 via the 'content-backu…
• CVE-2023-6971严重 9.8The Backup Migration plugin for WordPress is vulnerable to Remote File Inclusion in versions 1.0.8 to 1.3.9 via the 'content-dir' HTTP heade…