WP SuperBackup vulnerabilities

5 known vulnerabilities in WP SuperBackup from Azzaroco. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  WP SuperBackup: Improper Neutralization of Input During Web Page Generation

  CVE-2024-56069Jan 2, 2025Azzaroco

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in azzaroco WP SuperBackup indeed-wp-superbackup allows Reflected XSS.This issue affects WP SuperBackup: from n/a through <= 2.3.3.

• 7.4 High severity

  WP SuperBackup: Missing Authorization

  CVE-2024-56070Dec 31, 2024Azzaroco

  Missing Authorization vulnerability in azzaroco WP SuperBackup indeed-wp-superbackup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP SuperBackup: from n/a through <= 2.3.3.

• 7.5 High severity

  WP SuperBackup: Deserialization of Untrusted Data

  CVE-2024-56068Dec 31, 2024Azzaroco

  Deserialization of Untrusted Data vulnerability in azzaroco WP SuperBackup indeed-wp-superbackup.This issue affects WP SuperBackup: from n/a through <= 2.3.3.

• 7.5 High severity

  WP SuperBackup: Missing Authorization

  CVE-2024-56067Dec 31, 2024AzzarocoEPSS 11.7%

  Missing Authorization vulnerability in azzaroco WP SuperBackup indeed-wp-superbackup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP SuperBackup: from n/a through <= 2.3.3.

• 10.0 Critical severity

  WP SuperBackup: Unrestricted Upload of File with Dangerous Type

  CVE-2024-56064Dec 31, 2024AzzarocoEPSS 33%

  Unrestricted Upload of File with Dangerous Type vulnerability in azzaroco WP SuperBackup indeed-wp-superbackup allows Upload a Web Shell to a Web Server.This issue affects WP SuperBackup: from n/a through <= 2.3.3.