Skip to content
OpenAdvisories

Vendor

iThemes

3 known vulnerabilities.

Products

BackupBuddy 1 ServerBuddy by PluginBuddy.com 1 WPComplete 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.1
    CVE-2022-45825

    WordPress WPComplete Plugin <= 2.9.4 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in iThemes WPComplete plugin <= 2.9.2 versions.

    iThemes WPComplete
  • High 7.5
    CVE-2022-31474 Scanner template EPSS 64%

    WordPress BackupBuddy Plugin 8.5.8.0-8.7.4.1 is vulnerable to Directory Traversal

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in iThemes BackupBuddy allows Path Traversal.This issue affects BackupBuddy: from 8.5.8.0 through 8.7.4.1.

    iThemes BackupBuddy