Vulnerability history

Admin+ Privilege Escalation via Post-Restore Auto-Login vulnerability

Authenticated (Administrator+) OS Command Injection vulnerability

Sensitive Information Exposure vulnerability

Sensitive Data Exposure vulnerability

Missing Authorization to Unauthenticated Backup Upload to Offline Storage vulnerability

Authenticated (Admin+) OS Command Injection via url vulnerability

Information Exposure to Unauthenticated Back-up Download vulnerability

Unauthenticated PHP Object Injection via 'recursive_unserialize_replace' vulnerability

Broken Access Control vulnerability

Sensitive Data Exposure via Log vulnerability

WordPress Backup Migration plugin 1.0.8 - 1.3.9 - Remote File Inclusion vulnerability

Unauth Path Traversal to Arbitrary File Deletion vulnerability

Unauthenticated Sensitive Information Exposure vulnerability

Unauthenticated Remote Code Execution vulnerability

Unauthenticated Arbitrary File Download to Sensitive Information Exposure vulnerability

Cross-Site Request Forgery vulnerability

Missing Authorization on handle_installation function vulnerability

Cross-Site Request Forgery on handle_installation function vulnerability

Authenticated Persistent Cross-Site Scripting (XSS) vulnerability