Medium · 4.8 CVE-2021-36884 EUVD-2021-23460GHSA-5q55-ghjj-wjrp

WordPress Backup Migration plugin <= 1.1.5 - Authenticated Persistent Cross-Site Scripting (XSS) vulnerability

Published Nov 19, 2021 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Authenticated Persistent Cross-Site Scripting (XSS) vulnerability discovered in WordPress Backup Migration plugin <= 1.1.5 versions.

Vendor	Product	Affected	Fixed
Backupbliss	Backup Migration (WordPress plugin)	<= 1.1.5 – ≤ 1.1.5	—