All products

backwpup

WordPress · Plugin
16 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
BackWPup – WordPress Backup & Restore Plugin 3.3 - 5.7.6 - Missing AuthorizationCVE-2026-86827 backwpup WordPress Medium Fix reported
BackWPup – WordPress Backup & Restore Plugin < 5.7.7 - Authenticated (Administrator+) Path TraversalCVE-2026-86828 backwpup WordPress Medium Fix reported
BackWPup – WordPress Backup & Restore Plugin < 5.7.7 - Unauthenticated Information ExposureCVE-2026-86826 backwpup WordPress Medium Fix reported
BackWPup – WordPress Backup & Restore Plugin 5.2.2 - 5.7.4 - Missing AuthorizationCVE-2026-86815 backwpup WordPress Medium Fix reported
BackWPup <= 5.7.4 - Unauthenticated Stored Cross-Site ScriptingCVE-2026-65443 backwpup WordPress High Fix reported
BackWPup <= 5.6.6 - Authenticated (Administrator+) Local File Inclusion via 'block_name' ParameterCVE-2026-6227 backwpup WordPress High Fix reported
BackWPup 5.0.0 - 5.6.2 - Authenticated (BackWPup Helper+) Privilege Escalation via Arbitrary Options UpdateCVE-2025-15041 backwpup WordPress High Fix reported
BackWPup 5 - 5.5.0 - Missing Authorization to Sensitive Information ExposureCVE-2025-10579 backwpup WordPress Medium Fix reported
BackWPup <= 4.0.1 - Authenticated (Administrator+) Directory TraversalCVE-2023-5505 backwpup WordPress Medium Fix reported
BackWPup <= 4.0.3 - Sensitive Information ExposureCVE-2023-7164 backwpup WordPress High Fix reported
BackWPup <= 4.0.2 - Plaintext Storage of Backup Destination PasswordCVE-2023-5775 backwpup WordPress Low Fix reported
BackWPup – WordPress Backup Plugin < 1.4.1 - Directory TraversalCVE-2011-5208 backwpup WordPress High Fix reported
BackWPup <= 4.0.1 - Authenticated (Administrator+) Directory TraversalCVE-2023-5504 backwpup WordPress High Fix reported
BackWPup <= 3.4.1 - Unauthenticated Backup DownloadCVE-2017-2551 backwpup WordPress High Fix reported
BackWPup < 3.0.13 - Cross-Site ScriptingCVE-2013-4626 backwpup WordPress Medium Fix reported
BackWPup <= 1.7.1 - Remote File InclusionCVE-2011-4342 backwpup WordPress Critical Fix reported