inisev BackupBliss – Backup & Migration with Free Cloud Storage vulnerabilities

13 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Latest inisev BackupBliss – Backup & Migration with Free Cloud Storage vulnerabilities

CVE-2026-18216 — Backup Migration < 2.1.7 - Admin+ Privilege Escalation via Post-Restore Auto-Login (CVSS 6.5)
CVE-2025-14944 — Backup Migration <= 2.0.0 - Missing Authorization to Unauthenticated Backup Upload to Offline Storage (CVSS 5.3)
CVE-2025-12394 — Backup Migration < 2.0.0 - Unauthenticated Backup Download (CVSS 5.9)
CVE-2024-10932 — Backup Migration <= 1.4.6 - Unauthenticated PHP Object Injection via 'recursive_unserialize_replace' (CVSS 8.8)
CVE-2023-6266 — Backup Migration <= 1.3.6 - Unauthenticated Arbitrary Backup Download to Sensitive Information Exposure (CVSS 7.5)
CVE-2023-6271 — Backup Migration Staging < 1.3.6 - Sensitive Data Exposure (CVSS 7.5)
CVE-2023-7002 — Backup Migration <= 1.3.9 - Authenticated (Admin+) OS Command Injection via url (CVSS 7.2)
CVE-2023-6972 — Backup Migration <= 1.3.9 - Unauthenticated Path Traversal to Arbitrary File Deletion (CVSS 9.8)
CVE-2023-6971 — (CVSS 9.8)
CVE-2023-6553 — Backup Migration <= 1.3.7 - Unauthenticated Remote Code Execution (CVSS 9.8)
CVE-2023-3977 — Inisev Plugins (Various Versions) - Cross-Site Request Forgery on handle_installation function (CVSS 4.3)
CVE-2023-0958 — Inisev Plugins (Various Versions) - Missing Authorization on handle_installation function (CVSS 6.5)
CVE-2021-36884 — WordPress Backup Migration plugin <= 1.1.5 - Authenticated Persistent Cross-Site Scripting (XSS) vulnerability (CVSS 5.4)