Backupbliss WordPress Plugin Backup Migration vulnerabilities

Latest Backupbliss WordPress Plugin Backup Migration CVEs

Newest publication first

1. CVE-2023-54346 WordPress Plugin Backup Migration 1.2.8 Unauthenticated Database Backup Download

   Published 2026-05-05

   High·CVSS 8.7 EPSS 0.31%

   WordPress Plugin Backup Migration 1.2.8 contains an information disclosure vulnerability that allows unauthenticated attackers to download complete database backups by accessing predictable file paths. Attackers can enumerate backup directories through configuration files and com...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.