BackWPup – WordPress Backup & Restore Plugin

Уязвимости

• CVE-2023-5504админ≤ 4.0.1

  BackWPup <= 4.0.1 - Authenticated (Administrator+) Directory Traversal

  Высокий 8.7

• CVE-2017-2551без авторизации→ 3.4.1

  Vulnerability in Wordpress plugin BackWPup before v3.4.2 allows possible brute forcing of backup file for download.

  Высокий 7.5

• CVE-2026-6227админ≤ 5.6.6

  BackWPup <= 5.6.6 - Authenticated (Administrator+) Local File Inclusion via 'block_name' Parameter

  Высокий 7.2

• CVE-2025-15041высокие права≤ 5.6.2

  BackWPup <= 5.6.2 - Authenticated (BackWPup Helper+) Privilege Escalation via Arbitrary Options Update

  Высокий 7.2

• CVE-2026-65443без авторизации · нужен клик≤ 5.7.4

  WordPress BackWPup plugin <= 5.7.4 - Cross Site Scripting (XSS) vulnerability

  Высокий 7.1

• CVE-2023-5505админ≤ 4.0.1

  BackWPup <= 4.0.1 - Authenticated (Administrator+) Directory Traversal

  Средний 6.8

• CVE-2025-10579подписчик+≤ 5.5.0

  BackWPup <= 5.5.0 - Missing Authorization to Sensitive Information Exposure

  Средний 5.3

• CVE-2011-5208

  Multiple directory traversal vulnerabilities in the BackWPup plugin before 1.4.1 for WordPress allow remote attackers to read arbitrary file

  Средний 5.0

• CVE-2013-4626

  Cross-site scripting (XSS) vulnerability in the BackWPup plugin before 3.0.13 for WordPress allows remote attackers to inject arbitrary web

  Средний 4.3

• CVE-2023-5775админ≤ 4.0.2

  BackWPup <= 4.0.2 - Plaintext Storage of Backup Destination Password

  Низкий 2.7