Skip to content
OpenAdvisories

Product · WebToffee

WebToffee WP Backup and Migration

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.7
    CVE-2026-120530

    WebToffee WP Backup and Migration <= 1.6.1 - Authenticated (Subscriber+) SQL Injection via User Profile Biography

    The WebToffee WP Backup and Migration plugin for WordPress is vulnerable to generic SQL Injection via the 'description' parameter in all versions up to, and including, 1.6.1 due to insufficient escaping on the user supplied parameter and lack of sufficient pr…

    WebToffee WebToffee WP Backup and Migration Web / CMS
  • Medium 4.3
    CVE-2024-3546

    WordPress Backup & Migration <= 1.4.8 - Missing Authorization to Directory Traversal

    The WordPress Backup & Migration plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the wp_mgdp_populate_popup function in all versions up to, and including, 1.4.8. This makes it possible for authenticated a…

    WebToffee WebToffee WP Backup and Migration Web / CMS