Advisories · Technology
BackWPup.
Every CVE that names BackWPup among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.6 Medium
BackWPup < 5.7.7 - Admin+ Path Traversal to RCE via Restore PclZip Fallback
- BackWPup
- Path traversal
- CVSS 5.3 Medium
BackWPup 3.3 - 5.7.6 - Unauthenticated Backup Job Execution via wp-cron.php
- BackWPup
- Broken access control
- CVSS 5.9 Medium
BackWPup < 5.7.7 - Unauthenticated Sensitive Data Disclosure via Restore Working Directory on NGINX
- BackWPup
- Information disclosure
- CVSS 5.5 Medium
BackWPup 5.2.2 - 5.7.4 - BackWPup Jobs Checker+ Database Backup Exfiltration via Missing Authorization on Job REST Routes
- BackWPup
- Broken access control
- CVSS 7.5 High
BackWPup < 4.0.4 - Unauthenticated Backup Download
- BackWPup