Advisories · Technology
inisev BackupBliss – Backup & Migration with Free Cloud Storage.
Every CVE that names inisev BackupBliss – Backup & Migration with Free Cloud Storage among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
Backup Migration <= 2.0.0 - Missing Authorization to Unauthenticated Backup Upload to Offline Storage
- inisev BackupBliss – Backup & Migration with Free Cloud Storage
- Broken access control
- CVSS 8.8 High
Backup Migration <= 1.4.6 - Unauthenticated PHP Object Injection via 'recursive_unserialize_replace'
- inisev BackupBliss – Backup & Migration with Free Cloud Storage
- Insecure deserialization
- CVSS 7.5 High
Backup Migration <= 1.3.6 - Unauthenticated Arbitrary Backup Download to Sensitive Information Exposure
- inisev BackupBliss – Backup & Migration with Free Cloud Storage
- Information disclosure
- CVSS 7.2 HighCritical · CVSS 7+ and EPSS
Backup Migration <= 1.3.9 - Authenticated (Admin+) OS Command Injection via url
- inisev BackupBliss – Backup & Migration with Free Cloud Storage
- Command injection
- CVSS 9.8 CriticalCritical · CVSS 9+
Backup Migration <= 1.3.9 - Unauthenticated Path Traversal to Arbitrary File Deletion
- inisev BackupBliss – Backup & Migration with Free Cloud Storage
- Path traversal
- CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS
Backup Migration <= 1.3.7 - Unauthenticated Remote Code Execution
- inisev BackupBliss – Backup & Migration with Free Cloud Storage
- Code injection
- CVSS 4.3 Medium
Inisev Plugins (Various Versions) - Missing Authorization on handle_installation function
- inisev Redirection
- inisev Pop-up
- Broken access control
- CVSS 4.3 Medium
Inisev Plugins (Various Versions) - Cross-Site Request Forgery on handle_installation function
- inisev Redirection
- inisev Pop-up
- Cross-site request forgery (CSRF)