Skip to content
OpenAdvisories

Product · Inisev

Backup Migration

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.2
    CVE-2026-7693

    Backup Migration <= 2.1.5.1 - Authenticated (Administrator+) OS Command Injection via 'file' Parameter

    The Backup Migration plugin for WordPress is vulnerable to OS Command Injection in all versions up to, and including, 2.1.5.1 due to insufficient sanitization of the `file` POST parameter on the `restoreBackup()` AJAX handler. The handler applies `esc_attr()`…

    Inisev Backup Migration Web / CMS
  • High 7.5
    CVE-2026-39480

    WordPress Backup Migration plugin <= 2.1.1 - Sensitive Data Exposure vulnerability

    Unauthenticated Sensitive Data Exposure in Backup Migration <= 2.1.1 versions.

    Inisev Backup Migration