Skip to content
OpenAdvisories

Vendor

Inisev

22 known vulnerabilities.

Products

BackupBliss – Backup & Migration with Free Cloud Storage 8 Social Media Share Buttons & Social Sharing Icons 5 Backup Migration 4 Social Media & Share Icons 4 Duplicate Post 3 Social Share Icons & Social Share Buttons 3 Redirection 2 Pop-up 2 Copy & Delete Posts 1
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 7.1
    CVE-2026-42697

    WordPress Social Share Icons & Social Share Buttons plugin <= 3.7.5 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Inisev Social Share Icons & Social Share Buttons ultimate-social-media-plus allows Reflected XSS.This issue affects Social Share Icons & Social Share Buttons…

    Inisev Social Share Icons & Social Share Buttons
  • High 7.1
    CVE-2026-66623

    WordPress Social Media & Share Icons plugin <= 2.9.9 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Social Media & Share Icons <= 2.9.9 versions.

    Inisev Social Media & Share Icons
  • High 7.2
    CVE-2026-7693

    Backup Migration <= 2.1.5.1 - Authenticated (Administrator+) OS Command Injection via 'file' Parameter

    The Backup Migration plugin for WordPress is vulnerable to OS Command Injection in all versions up to, and including, 2.1.5.1 due to insufficient sanitization of the `file` POST parameter on the `restoreBackup()` AJAX handler. The handler applies `esc_attr()`…

    Inisev Backup Migration Web / CMS
  • High 7.5
    CVE-2026-39480

    WordPress Backup Migration plugin <= 2.1.1 - Sensitive Data Exposure vulnerability

    Unauthenticated Sensitive Data Exposure in Backup Migration <= 2.1.1 versions.

    Inisev Backup Migration
  • High 8.1
    CVE-2026-53738

    Copy & Delete Posts through 1.5.4 Privilege Escalation via cdp_action_handling Handler

    Copy & Delete Posts through 1.5.4 lets any plugin-enabled non-admin role invoke every operation in the cdp_action_handling AJAX handler. Attackers with an enabled role can delete posts or overwrite plugin settings via the f parameter, bypassing per-function c…

    Inisev Copy & Delete Posts
  • High 8.8
    CVE-2024-10932

    Backup Migration <= 1.4.6 - Unauthenticated PHP Object Injection via 'recursive_unserialize_replace'

    The Backup Migration plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.4.6 via deserialization of untrusted input in the 'recursive_unserialize_replace' function. This makes it possible for unauthenticated atta…

    Inisev BackupBliss – Backup & Migration with Free Cloud Storage Web / CMS
  • High 7.5
    CVE-2023-6266 Scanner template

    Backup Migration <= 1.3.6 - Unauthenticated Arbitrary Backup Download to Sensitive Information Exposure

    The Backup Migration plugin for WordPress is vulnerable to unauthorized access of data due to insufficient path and file validation on the BMI_BACKUP case of the handle_downloading function in all versions up to, and including, 1.3.6. This makes it possible f…

    Inisev BackupBliss – Backup & Migration with Free Cloud Storage Web / CMS
  • High 7.2
    CVE-2023-7002 EPSS 31%

    Backup Migration <= 1.3.9 - Authenticated (Admin+) OS Command Injection via url

    The Backup Migration plugin for WordPress is vulnerable to OS Command Injection in all versions up to, and including, 1.3.9 via the 'url' parameter. This vulnerability allows authenticated attackers, with administrator-level permissions and above, to execute …

    Inisev BackupBliss – Backup & Migration with Free Cloud Storage Web / CMS