Plugin icon

Database Backup for WordPress

wp-db-backup

Vulnerabilities:

7

Last Updated:

April 20, 2026

Active Installs:

70000

Published
Title
Fixed in
CVSS
Published
2026-05-13
Title
Database Backup for WordPress < 2.5.3 - Missing Authorization to Unauthenticated Database Backup Interception
Fixed in
Fixed in 2.5.3
CVSS
7.5 (high)
Published
2026-05-13
Title
Database Backup for WordPress < 2.5.3 - Missing Authorization to Unauthenticated Database Export
Fixed in
Fixed in 2.5.3
CVSS
7.5 (high)
Published
2026-05-13
Title
Database Backup for WordPress < 2.5.3 - Missing Authorization to Unauthenticated Arbitrary File Read and Deletion
Fixed in
Fixed in 2.5.3
CVSS
8.1 (high)
Published
2022-05-11
Title
Database Backup for WordPress < 2.5.2 - Arbitrary Schedule Settings Update via CSRF
Fixed in
Fixed in 2.5.2
CVSS
5.4 (medium)
Published
2022-01-24
Title
Database Backup for WordPress < 2.5.1 - Admin+ SQL Injection
Fixed in
Fixed in 2.5.1
CVSS
6.8 (medium)
Published
2021-05-16
Title
Database Backup for WordPress < 2.4 - Authenticated Persistent Cross-Site Scripting (XSS)
Fixed in
Fixed in 2.4
CVSS
5.9 (medium)
Published
2014-11-04
Title
WP DB Backup < 2.3.0 - Backup Filename Brute Forcing
Fixed in
Fixed in 2.3.0
CVSS
7.5 (high)