<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: total upkeep</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2020-36848: The Total Upkeep – WordPress Backup Plugin plus Restore &amp; Migrate by BoldGrid plugin for WordPress is vulnerab</title><link>https://patchthecve.com/cve/CVE-2020-36848.html</link><guid>https://patchthecve.com/cve/CVE-2020-36848.html</guid><pubDate>Wed, 17 Jun 2026 03:16:19 +0000</pubDate><description>HIGH 7.5: The Total Upkeep – WordPress Backup Plugin plus Restore &amp; Migrate by BoldGrid plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.14.9 via the env-info.php and restore-info.json files. This makes it possible for unauthenticated attackers to fi</description></item><item><title>CVE-2025-2257: The Total Upkeep – WordPress Backup Plugin plus Restore &amp; Migrate by BoldGrid plugin for WordPress is vulnerab</title><link>https://patchthecve.com/cve/CVE-2025-2257.html</link><guid>https://patchthecve.com/cve/CVE-2025-2257.html</guid><pubDate>Wed, 17 Jun 2026 09:06:38 +0000</pubDate><description>HIGH 7.2: The Total Upkeep – WordPress Backup Plugin plus Restore &amp; Migrate by BoldGrid plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.16.10 via the compression_level setting. This is due to the plugin using the compression_level setting in proc_open() with</description></item><item><title>CVE-2024-13907: The Total Upkeep – WordPress Backup Plugin plus Restore &amp; Migrate by BoldGrid plugin for WordPress is vulnerab</title><link>https://patchthecve.com/cve/CVE-2024-13907.html</link><guid>https://patchthecve.com/cve/CVE-2024-13907.html</guid><pubDate>Wed, 17 Jun 2026 07:02:58 +0000</pubDate><description>MEDIUM 4.9: The Total Upkeep – WordPress Backup Plugin plus Restore &amp; Migrate by BoldGrid plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.16.8 via the &#x27;download&#x27; function. This makes it possible for authenticated attackers, with Administrator-level acces</description></item><item><title>CVE-2024-9461: The Total Upkeep – WordPress Backup Plugin plus Restore &amp; Migrate by BoldGrid plugin for WordPress is vulnerab</title><link>https://patchthecve.com/cve/CVE-2024-9461.html</link><guid>https://patchthecve.com/cve/CVE-2024-9461.html</guid><pubDate>Wed, 17 Jun 2026 08:24:36 +0000</pubDate><description>HIGH 7.2: The Total Upkeep – WordPress Backup Plugin plus Restore &amp; Migrate by BoldGrid plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.16.6 via the cron_interval parameter. This is due to missing input validation and sanitization. This makes it possible for</description></item><item><title>CVE-2024-24869: Improper Limitation of a Pathname to a Restricted Directory (&#x27;Path Traversal&#x27;) vulnerability in BoldGrid Total</title><link>https://patchthecve.com/cve/CVE-2024-24869.html</link><guid>https://patchthecve.com/cve/CVE-2024-24869.html</guid><pubDate>Wed, 17 Jun 2026 07:15:08 +0000</pubDate><description>HIGH 7.5: Improper Limitation of a Pathname to a Restricted Directory (&#x27;Path Traversal&#x27;) vulnerability in BoldGrid Total Upkeep allows Relative Path Traversal.This issue affects Total Upkeep: from n/a through 1.15.8.</description></item></channel></rss>