<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: backuply</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2024-8669: The Backuply – Backup, Restore, Migrate and Clone plugin for WordPress is vulnerable to SQL Injection via the </title><link>https://patchthecve.com/cve/CVE-2024-8669.html</link><guid>https://patchthecve.com/cve/CVE-2024-8669.html</guid><pubDate>Wed, 17 Jun 2026 08:23:05 +0000</pubDate><description>CRITICAL 9.1: The Backuply – Backup, Restore, Migrate and Clone plugin for WordPress is vulnerable to SQL Injection via the &#x27;options&#x27; parameter passed to the backuply_wp_clone_sql() function in all versions up to, and including, 1.3.4 due to insufficient escaping on the user supplied parameter and lack of suffici</description></item><item><title>CVE-2024-0842: The Backuply – Backup, Restore, Migrate and Clone plugin for WordPress is vulnerable to Denial of Service in a</title><link>https://patchthecve.com/cve/CVE-2024-0842.html</link><guid>https://patchthecve.com/cve/CVE-2024-0842.html</guid><pubDate>Wed, 17 Jun 2026 06:54:25 +0000</pubDate><description>HIGH 7.5: The Backuply – Backup, Restore, Migrate and Clone plugin for WordPress is vulnerable to Denial of Service in all versions up to, and including, 1.2.6. This is due to direct access of the backuply/restore_ins.php file and. This makes it possible for unauthenticated attackers to make excessive request</description></item><item><title>CVE-2024-0697: The Backuply – Backup, Restore, Migrate and Clone plugin for WordPress is vulnerable to Directory Traversal in</title><link>https://patchthecve.com/cve/CVE-2024-0697.html</link><guid>https://patchthecve.com/cve/CVE-2024-0697.html</guid><pubDate>Wed, 17 Jun 2026 06:54:03 +0000</pubDate><description>MEDIUM 6.5: The Backuply – Backup, Restore, Migrate and Clone plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.2.3 via the node_id parameter in the backuply_get_jstree function. This makes it possible for attackers with administrator privileges or higher to read </description></item></channel></rss>