WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
backupbuddy
Published
2023-01-30
Title
BackupBuddy < 8.8.3 - Multiple Reflected Cross-Site Scripting
Slug
backuply
Published
2024-01-26
Title
Backuply – Backup, Restore, Migrate and Clone < 1.2.4 - Admin+ Directory Traversal
Slug
backuply
Published
2024-02-08
Title
Backuply - Backup, Restore, Migrate and Clone < 1.2.6 - Unauthenticated Denial of Service
Slug
backuply
Published
2024-03-15
Title
Backuply – Backup, Restore, Migrate and Clone < 1.2.8 - Admin+ Directory Traversal
Slug
backuply
Published
2024-09-13
Title
Backuply – Backup, Restore, Migrate and Clone < 1.3.5 - Authenticated (Admin+) SQL Injection
Slug
backuply
Published
2025-09-25
Title
Backuply < 1.4.9 - Admin+ Arbitrary File Deletion
Slug
backupwordpress
Published
2014-08-01
Title
BackUp <= 0.4.2b - RFI
Slug
backupwordpress
Published
2022-02-23
Title
BackupWordPress 3.12 - Subscriber+ Backup Disclosure
Slug
backupwordpress
Published
2024-04-26
Title
BackUpWordPress < 3.14 - Admin+ Directory Traversal
Slug
backwp
Published
2025-06-05
Title
Backwp <= 2.0.2 - Cross-Site Request Forgery
Slug
backwp
Published
2025-07-01
Title
Backwp <= 2.0.2 - Reflected Cross-Site Scripting
Slug
backwpup
Published
2014-08-01
Title
BackWPup 2.1.4 - Code Execution
Slug
backwpup
Published
2013-06-19
Title
BackWPup <= 3.0.12 - Authenticated Cross-Site Scripting (XSS)
Slug
backwpup
Published
2017-09-08
Title
BackWPup <= 3.4.1 - Backup File Download
Slug
backwpup
Published
2011-03-28
Title
Backwpup < 1.7.2 - Remote File Inclusion
Slug
backwpup
Published
2023-11-22
Title
BackWPup < 4.0.2 - Authenticated (Administrator+) Directory Traversal
Slug
backwpup
Published
2023-12-18
Title
BackWPup < 4.0.4 - Unauthenticated Backup Download
Slug
backwpup
Published
2024-08-16
Title
BackWPup < 4.0.2 - Admin+ Directory Traversal
Slug
backwpup
Published
2025-10-24
Title
BackWPup < 5.5.1 - Missing Authorization to Sensitive Information Exposure
Slug
bacola-core
Published
2023-12-07
Title
Multiple Plugins by KlbTheme - Reflected Cross-Site Scripting
Slug
bacon-ipsum
Published
2025-06-05
Title
Bacon Ipsum <= 2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
bad-behavior
Published
2012-05-11
Title
Bad Behavior < 2.2.5 - Cross-Site Scripting (XSS)
Slug
badgearoo
Published
2024-12-07
Title
Badgearoo <= 1.0.14 - Reflected XSS
Slug
badgearoo
Published
2024-12-07
Title
Badgearoo <= 1.0.14 - Admin+ Stored XSS
Slug
badgeos
Published
2022-04-13
Title
BadgeOS < 3.7.1 - Unauthenticated SQLi