Advisories · Technology
wp_media BackWPup – WordPress Backup & Restore Plugin.
Every CVE that names wp_media BackWPup – WordPress Backup & Restore Plugin among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.2 High
BackWPup <= 5.6.6 - Authenticated (Administrator+) Local File Inclusion via 'block_name' Parameter
- wp_media BackWPup – WordPress Backup & Restore Plugin
- Path traversal
- CVSS 7.2 High
BackWPup <= 5.6.2 - Authenticated (BackWPup Helper+) Privilege Escalation via Arbitrary Options Update
- wp_media BackWPup – WordPress Backup & Restore Plugin
- Broken access control
- CVSS 5.3 Medium
BackWPup <= 5.5.0 - Missing Authorization to Sensitive Information Exposure
- wp_media BackWPup – WordPress Backup & Restore Plugin
- Broken access control
- CVSS 6.8 Medium
BackWPup <= 4.0.1 - Authenticated (Administrator+) Directory Traversal
- wp_media BackWPup – WordPress Backup & Restore Plugin
- Path traversal
- CVSS 2.2 Low
BackWPup <= 4.0.2 - Plaintext Storage of Backup Destination Password
- wp_media BackWPup – WordPress Backup & Restore Plugin
- CWE-256
- CVSS 8.7 High
BackWPup <= 4.0.1 - Authenticated (Administrator+) Directory Traversal
- wp_media BackWPup – WordPress Backup & Restore Plugin
- Path traversal