WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
backup-backup
Published
2023-12-22
Title
Backup Migration < 1.4.0 - Unauthenticated Path Traversal to Arbitrary File Deletion
Slug
backup-backup
Published
2023-12-22
Title
Backup Migration < 1.4.0 - Authenticated (Admin+) OS Command Injection via url
Slug
backup-backup
Published
2023-12-22
Title
Backup Migration 1.0.8 - 1.3.9 - Remote File Inclusion via content-dir
Slug
backup-backup
Published
2024-04-17
Title
Backup Migration < 1.4.4 - Information Exposure via Log Files
Slug
backup-backup
Published
2025-01-03
Title
Backup Migration < 1.4.6.1 - Unauthenticated PHP Object Injection via 'recursive_unserialize_replace'
Slug
backup-backup
Published
2025-11-03
Title
Backup Migration < 2.0.0 - Unauthenticated Backup Download
Slug
backup-backup
Published
2026-04-06
Title
Backup Migration < 2.1.0 - Missing Authorization to Unauthenticated Backup Upload to Offline Storage
Slug
backup-backup
Published
2026-04-08
Title
BackupBliss – Backup & Migration with Free Cloud Storage < 2.1.2 - Unauthenticated Information Exposure
Slug
backup-backup
Published
2026-08-04
Title
Backup Migration < 2.1.5.2 - Admin+ OS Command Injection via 'file' Parameter
Slug
backup-backup
Published
2026-08-13
Title
Backup Migration < 2.1.7 - Admin+ Privilege Escalation via Post-Restore Auto-Login
Slug
backup-bolt
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
backup-bolt
Published
2024-02-20
Title
Backup Bolt < 1.4.0 - Sensitive Data Exposure
Slug
backup-bolt
Published
2025-08-19
Title
Backup Bolt <= 1.4.1 - Cross-Site Request Forgery
Slug
backup-bolt
Published
2025-10-02
Title
Backup Bolt < 1.5.0 - Authenticated (Admin+) Arbitrary File Download
Slug
backup-by-supsystic
Published
2021-02-08
Title
Backup by Supsystic <= 2.3.9 - Authenticated Arbitrary File Download and Deletion
Slug
backup-by-supsystic
Published
2026-05-16
Title
Backup by Supsystic <= 2.3.9 - Unauthenticated Local File Inclusion
Slug
backup-database
Published
2024-08-18
Title
Backup Database <= 4.9 - Admin+ Stored XSS
Slug
backup-scheduler
Published
2022-09-23
Title
Backup Scheduler <= 1.5.13 - Cross-Site Request Forgery
Slug
backup-wd
Published
2021-06-16
Title
Backup by 10Web <= 1.0.20 - Reflected Cross-Site Scripting (XSS)
Slug
backupbuddy
Published
2013-03-24
Title
Backupbuddy - importbuddy.php Direct Request Remote Backup File Disclosure
Slug
backupbuddy
Published
2013-03-24
Title
Backupbuddy - importbuddy.php step Parameter Manipulation Authentication Bypass
Slug
backupbuddy
Published
2015-03-24
Title
Backupbuddy - importbuddy.php step Parameter Remote PHP Information Disclosure
Slug
backupbuddy
Published
2013-03-24
Title
Backupbuddy - importbuddy.php Restore Operation Persistence Weakness
Slug
backupbuddy
Published
2022-09-06
Title
BackupBuddy < 8.7.5 - Unauthenticated Arbitrary File Access
Slug
backupbuddy
Published
2023-01-30
Title
BackupBuddy < 8.8.3 - Multiple Reflected Cross-Site Scripting