Lucene search

K

Backup And Migration Security Vulnerabilities

cve
cve

CVE-2023-5737

The WordPress Backup & Migration WordPress plugin before 1.4.4 does not authorize some AJAX requests, allowing users with a role as low as Subscriber to update some plugin settings.

4.3CVSS

4.9AI Score

0.0004EPSS

2023-11-27 05:15 PM
45
cve
cve

CVE-2023-5738

The WordPress Backup & Migration WordPress plugin before 1.4.4 does not sanitise and escape some parameters, which could allow users with a role as low as Subscriber to perform Cross-Site Scripting attacks.

5.4CVSS

5.5AI Score

0.0004EPSS

2023-11-27 05:15 PM
37