CVE-2020-36848highCWE-200

CVE-2020-36848: fallo de gravedad alta en boldgrid Total Upkeep – WordPress Backup…

Total Upkeep by BoldGrid <= 1.14.9 - Unauthenticated Backup Download

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

36Vexday Risk Score

Corrige pronto. Ella tiene exploit funcional público.

ssvc Attendcvss 7.5epss 1.9%
de la publicación al armael mismo día
Publicada en NVD12 jul
metasploit12 dic
The Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.14.9 via the env-info.php and restore-info.json files. This makes it possible for unauthenticated attackers to find the location of back-up files and subsequently download them.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Productos afectados
boldgrid · Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid
CVEs relacionadas — boldgrid Total Upkeep – WordPress Backup…

En el mismo producto, de las más peligrosas a las menos.

CVE-2024-9461HIGHTotal Upkeep <= 1.16.6 - Authenticated (Administrator+) Remote Code Execution via Backup SettingsEPSS 1.0%CVE-2025-2257HIGHTotal Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid <= 1.16.10 - Authenticated (Admin+) Command InjectionEPSS 0.9%CVE-2022-4932MEDIUMTotal Upkeep <= 1.14.13 - Missing Authorization to Authenticated (Subscriber+) Information DisclosureEPSS 0.6%CVE-2024-13907MEDIUMTotal Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid <= 1.16.8 - Authenticated (Administrator+) Server-Side Request ForgeryEPSS 0.5%CVE-2026-3143MEDIUMTotal Upkeep <= 1.17.1 - Missing Authorization to Unauthenticated Rollback CancellationEPSS 0.3%