BackWPup – WordPress Backup & Restore Plugin

Güvenlik açıkları

• CVE-2023-5504yönetici≤ 4.0.1

  BackWPup <= 4.0.1 - Authenticated (Administrator+) Directory Traversal

  Yüksek 8.7

• CVE-2017-2551kimlik doğrulamasız→ 3.4.1

  Vulnerability in Wordpress plugin BackWPup before v3.4.2 allows possible brute forcing of backup file for download.

  Yüksek 7.5

• CVE-2026-6227yönetici≤ 5.6.6

  BackWPup <= 5.6.6 - Authenticated (Administrator+) Local File Inclusion via 'block_name' Parameter

  Yüksek 7.2

• CVE-2025-15041yüksek yetki≤ 5.6.2

  BackWPup <= 5.6.2 - Authenticated (BackWPup Helper+) Privilege Escalation via Arbitrary Options Update

  Yüksek 7.2

• CVE-2026-65443kimlik doğrulamasız · tıklama gerekir≤ 5.7.4

  WordPress BackWPup plugin <= 5.7.4 - Cross Site Scripting (XSS) vulnerability

  Yüksek 7.1

• CVE-2023-5505yönetici≤ 4.0.1

  BackWPup <= 4.0.1 - Authenticated (Administrator+) Directory Traversal

  Orta 6.8

• CVE-2025-10579abone+≤ 5.5.0

  BackWPup <= 5.5.0 - Missing Authorization to Sensitive Information Exposure

  Orta 5.3

• CVE-2011-5208

  Multiple directory traversal vulnerabilities in the BackWPup plugin before 1.4.1 for WordPress allow remote attackers to read arbitrary file

  Orta 5.0

• CVE-2013-4626

  Cross-site scripting (XSS) vulnerability in the BackWPup plugin before 3.0.13 for WordPress allows remote attackers to inject arbitrary web

  Orta 4.3

• CVE-2023-5775yönetici≤ 4.0.2

  BackWPup <= 4.0.2 - Plaintext Storage of Backup Destination Password

  Düşük 2.7