4.3
Medium
CVE-2023-33928 Missing Authorization vulnerability in WebToffee WordPress Backup & Migration allows Exploiting Incorrectly Configured…
Description
Missing Authorization vulnerability in WebToffee WordPress Backup & Migration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordPress Backup & Migration: from n/a through 1.4.0.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WordPress Backup & Migration 1.4 | earliest → 1.4.0 | No fix stated |
Other CVEs of WordPress Backup & Migration
The 7 CVEs of WordPress Backup & Migration →
CVE-2026-97197
Unauthenticated Broken Access Control in WordPress Backup & Migration <= 1.6.0 versions
7.5
High
CVE-2025-24651
Insertion of Sensitive Information into Log File vulnerability in WebToffee WordPress Backup & Migration…
5.9
Medium
CVE-2023-45636
Missing Authorization vulnerability in WebToffee WordPress Backup & Migration wp-migration-duplicator allows…
5.4
Medium
CVE-2023-52183
Missing Authorization vulnerability in WebToffee WordPress Backup & Migration.This issue affects WordPress Backup &…
5.4
Medium