CVE-2022-4932

The Total Upkeep plugin for WordPress is vulnerable to information disclosure in versions up to, and including 1.14.13. This is due to missing authorization on the heartbeat_received() function that triggers on WordPress heartbeat. This makes it possible for authenticated attackers, with subscriber-level permissions and above to retrieve back-up paths that can subsequently be used to download the back-up.

• CWE-862

• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2684462%40boldgrid-backup&new=2684462%40boldgrid-backup&sfp_email=&sfph_mail=Patch
• https://www.wordfence.com/threat-intel/vulnerabilities/id/0e346146-1c00-4e03-a6c7-372566d7ffc9?source=cve
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2684462%40boldgrid-backup&new=2684462%40boldgrid-backup&sfp_email=&sfph_mail=Patch
• https://www.wordfence.com/threat-intel/vulnerabilities/id/0e346146-1c00-4e03-a6c7-372566d7ffc9Third Party Advisory

Published

Mar 7, 2023

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-49314In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2022-49315In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2022-49316In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2022-49317In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2022-49318In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2022-49319In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2022-49320In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2022-49321In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2022-49322In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2022-49323In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2022-49324In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2022-49325In the Linux kernel, the following vulnerability has been re…5.5