Webtoffee: >> Backup And Migration >> 1.1.2 Security Vulnerabilities
Insertion of Sensitive Information into Log File vulnerability in WebToffee WordPress Backup & Migration.This issue affects WordPress Backup & Migration: from n/a through 1.4.7.
CVSS Score
3.7
EPSS Score
0.007
Published
2024-04-10
The WordPress Backup & Migration WordPress plugin before 1.4.4 does not authorize some AJAX requests, allowing users with a role as low as Subscriber to update some plugin settings.
CVSS Score
4.3
EPSS Score
0.001
Published
2023-11-27
The WordPress Backup & Migration WordPress plugin before 1.4.4 does not sanitise and escape some parameters, which could allow users with a role as low as Subscriber to perform Cross-Site Scripting attacks.
CVSS Score
5.4
EPSS Score
0.001
Published
2023-11-27