PatchTheCVEbackup guard vulnerabilities and fixes
Recent CVEs affecting backup guard, with upgrade or downgrade steps. 3 tracked.
Also searched as: backupguard.
backup guard has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2021-04-05. Highest priority: CVE-2021-24155 (score 55/100).
- CVE-2021-24155 HIGH 7.2 UPGRADE The WordPress Backup and Migrate Plugin – Backup Guard WordPress plugin before 1.6.0 did not ensure that the i
- CVE-2017-18488 MEDIUM 6.1 UPGRADE The Backup Guard plugin before 1.1.47 for WordPress has multiple XSS issues.
- CVE-2017-10837 MEDIUM 6.1 UPGRADE Cross-site scripting vulnerability in BackupGuard prior to version 1.1.47 allows an attacker to inject arbitra
FAQ
How do I fix backup guard vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is backup guard being exploited right now?
None of the tracked backup guard CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which backup guard CVE should I patch first?
CVE-2021-24155 currently ranks highest (55/100): The WordPress Backup and Migrate Plugin – Backup Guard WordPress plugin before 1.6.0 did not ensure that the i.