Advisories · Technology

databasebackup WP Database Backup – Unlimited Database & Files Backup by Backup for WP.

Every CVE that names databasebackup WP Database Backup – Unlimited Database & Files Backup by Backup for WP among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-9834 CVE record

CVSS 7.2 High

WP Database Backup <= 7.11 - Authenticated (Administrator+) OS Command Injection via 'wp_db_exclude_table' Parameter
- databasebackup WP Database Backup – Unlimited Database & Files Backup by Backup for WP
- Command injection
Not analysed yet 2 Jul 2026
CVE-2019-25224 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

WP Database Backup < 5.2 - Unauthenticated OS Command Injection
- databasebackup WP Database Backup – Unlimited Database & Files Backup by Backup for WP
- Command injection
Not analysed yet 25 Jul 2025
CVE-2024-12330 CVE record

CVSS 7.5 High

WP Database Backup – Unlimited Database & Files Backup by Backup for WP <= 7.3 - Unauthenticated Database Back-Up Exposure
- databasebackup WP Database Backup – Unlimited Database & Files Backup by Backup for WP
- CWE-530
Not analysed yet 9 Jan 2025