https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2021-24155.htmlhttps://patchthecve.com/cve/CVE-2021-24155.htmlWed, 17 Jun 2026 03:39:29 +0000HIGH 7.2: The WordPress Backup and Migrate Plugin – Backup Guard WordPress plugin before 1.6.0 did not ensure that the imported files are of the SGBP format and extension, allowing high privilege users (admin+) to upload arbitrary files, including PHP ones, leading to RCE.https://patchthecve.com/cve/CVE-2017-18488.htmlhttps://patchthecve.com/cve/CVE-2017-18488.htmlWed, 17 Jun 2026 01:12:56 +0000MEDIUM 6.1: The Backup Guard plugin before 1.1.47 for WordPress has multiple XSS issues.https://patchthecve.com/cve/CVE-2017-10837.htmlhttps://patchthecve.com/cve/CVE-2017-10837.htmlWed, 17 Jun 2026 01:00:47 +0000MEDIUM 6.1: Cross-site scripting vulnerability in BackupGuard prior to version 1.1.47 allows an attacker to inject arbitrary web script or HTML via unspecified vectors.