{"items":[{"id":"CVE-2026-4853","published":"2026-04-17T03:36:43.041Z","updated":"2026-04-17T12:23:01.736Z","title":"JetBackup <= 3.1.19.8 - Authenticated (Administrator+) Arbitrary Directory Deletion via Path Traversal in 'fileName' Parameter","severity":"MEDIUM","score":4.9,"vendor":"backupguard","product":"JetBackup – Backup, Restore & Migrate","kev":false,"epss":0.00713,"kevAdded":null,"exploit":false},{"id":"CVE-2020-36669","published":"2023-03-07T13:33:59.555Z","updated":"2026-04-08T17:11:09.870Z","title":"JetBackup – WP Backup, Migrate & Restore <= 1.3.9 - Cross-Site Request Forgery to Arbitrary File Upload","severity":"HIGH","score":8.8,"vendor":"backupguard","product":"JetBackup – Backup, Restore & Migrate","kev":false,"epss":0.00408,"kevAdded":null,"exploit":false},{"id":"CVE-2020-36668","published":"2023-03-07T13:28:09.328Z","updated":"2026-04-08T16:47:49.583Z","title":"JetBackup – WP Backup, Migrate & Restore <= 1.4.0 - Sensitive Information Disclosure","severity":"MEDIUM","score":4.3,"vendor":"backupguard","product":"JetBackup – Backup, Restore & Migrate","kev":false,"epss":0.00639,"kevAdded":null,"exploit":false},{"id":"CVE-2020-36667","published":"2023-03-07T13:23:17.947Z","updated":"2026-04-08T16:54:45.885Z","title":"JetBackup – WP Backup, Migrate & Restore <= 1.4.1 - Missing Authorization to Unauthorized Backup Location Change","severity":"MEDIUM","score":5.4,"vendor":"backupguard","product":"JetBackup – Backup, Restore & Migrate","kev":false,"epss":0.00483,"kevAdded":null,"exploit":false},{"id":"CVE-2017-10837","published":"2017-08-28T20:00:00.000Z","updated":"2024-08-05T17:50:12.126Z","title":"Cross-site scripting vulnerability in BackupGuard prior to version 1.1.47 allows an attacker to inject arbitrary web script or HTML via unspecified vectors.","severity":"MEDIUM","score":6.1,"vendor":"BackupGuard","product":"BackupGuard","kev":false,"epss":0.00923,"kevAdded":null,"exploit":false}]}