Backup WordPress with Nifty Backups, CVE-2025-52763
- CVE, Research URL
- Home page URL
- Application
- Published on
- Oct 22, 2025
- Research Description
- Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NickDuncan Nifty Backups nifty-backups allows Reflected XSS.This issue affects Nifty Backups: from n/a through <= 1.08.
- Affected versions
-
max 1.08.
- Status
-
vulnerable
| Previous vulnerability researches |
|---|
| WP Gmail SMTP (CVE-2025-53232) , Nov 11, 2025 |
| WP Gmail SMTP (172cc1f3c82eb47a0e2bb5d14ce96f28ededb179) , Nov 11, 2025 |