Indeed Wp Superbackup Vulnerabilities

The Super Backup & Clone - Migrate for WordPress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 2.3.3. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remot...

CVSS:

9.8

Affected:

up to 2.3.3

Fixed in:

2.4

Disclosed:

Dec 18, 2024

CVE-2024-56064 on NVD →

The WP SuperBackup plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 2.3.3 via deserialization of untrusted input. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerabl...

CVSS:

8.8

Affected:

up to 2.3.3

Fixed in:

2.4

Disclosed:

Dec 18, 2024

CVE-2024-56068 on NVD →

The Super Backup & Clone - Migrate for WordPress plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 2.3.3. This makes it possible for unauthenticated attackers to download entire back-ups.

CVSS:

7.5

Affected:

up to 2.3.3

Fixed in:

2.4

Disclosed:

Dec 18, 2024

CVE-2024-56067 on NVD →

The WP SuperBackup plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 2.3.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully...

CVSS:

6.1

Affected:

up to 2.3.3

Fixed in:

2.4

Disclosed:

Dec 18, 2024

CVE-2024-56069 on NVD →

The Super Backup & Clone - Migrate for WordPress plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on several functions in all versions up to, and including, 2.3.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform unauthoriz...

CVSS:

4.3

Affected:

up to 2.3.3

Fixed in:

2.4

Disclosed:

Dec 18, 2024

CVE-2024-56070 on NVD →

The Super Backup & Clone - Migrate for WordPress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation and a missing capability check on the ibk_restore_migrate_check() function in all versions up to, and including, 2.3.3. This makes it possible for unauthenticated attackers t...

CVSS:

9.8

Affected:

up to 2.3.3

Fixed in:

2.4

Disclosed:

Dec 12, 2024

CVE-2024-9290 on NVD →