Jetbackup is a backup and data-protection solution for web hosting and cloud environments with a focused product scope. Its disclosed vulnerabilities center on web-application attack surface issues, principally cross-site request forgery, cross-site scripting, authorization weaknesses, and information exposure, consistent with a management interface exposed to hosting administrators and tenants. Current severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Jetbackup over time
Signals from CVEs in this vendor scope (5 CVEs).
5 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2023-7165HIGH The JetBackup WordPress plugin before 2.0.9.9 doesn't use index files to prevent public directory listing of sensitive directories in certain configurations, which allows malicious | Feb 27, 2024 | 7.5 | 37 | NO | YES |
CVE-2020-36669HIGH The JetBackup – WP Backup, Migrate & Restore plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including 1.3.9. This is due to missing nonce v | Mar 7, 2023 | 8.8 | 27 | NO | NO |
CVE-2020-36667MEDIUM The JetBackup – WP Backup, Migrate & Restore plugin for WordPress is vulnerable to unauthorized back-up location changes in versions up to, and including 1.4.1 due to a lack of pro | Mar 7, 2023 | 5.4 | 20 | NO | NO |
CVE-2022-34148MEDIUM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in JetBackup JetBackup – WP Backup, Migrate & Restore plugin <= 1.6.9.0 versions. | Mar 15, 2023 | 4.8 | 18 | NO | NO |
CVE-2020-36668MEDIUM The JetBackup – WP Backup, Migrate & Restore plugin for WordPress is vulnerable to sensitive information disclosure in versions up to, and including, 1.4.0 due to a lack of proper | Mar 7, 2023 | 4.3 | 18 | NO | NO |
Signals from CVEs in this vendor scope (5 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Jetbackup.
Media articles that mention a CVE ID that affects a product developed by Jetbackup — matched by CVE ID, not by vendor name.