CVE-2025-34084

critical

Description

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority as it is a duplicate of CVE-2020-36848.

References

Exploits
More

https://www.exploit-db.com/exploits/49252

https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/auxiliary/scanner/http/wp_total_upkeep_downloader.rb

https://www.boldgrid.com/wordpress-backup-plugin/

https://wordpress.org/plugins/boldgrid-backup/

https://vulncheck.com/advisories/wordpress-total-upkeep-boldgrid-backup-plugin-info-disclosure

https://plugins.trac.wordpress.org/changeset/2439376/boldgrid-backup

Details

Source: Mitre, NVD

Published: 2025-07-09

Updated: 2025-07-16

Risk Information

CVSS v2

Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS v3

Base Score: 7.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CVSS v4

Base Score: 9.2

Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N

Severity: Critical

EPSS

EPSS: 0.00171