Advisories · Technology

cssimmon WP BackItUp Community Edition.

Every CVE that names cssimmon WP BackItUp Community Edition among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-18386 CVE record

CVSS 4.9 Medium

WP BackItUp Community Edition <= 2.1.0 - Authenticated (Administrator+) Path Traversal to Arbitrary File Read via 'backup_file' Parameter
- cssimmon WP BackItUp Community Edition
- Path traversal
Not analysed yet 10 Sept 2026