WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
background-takeover
Published
2018-04-06
Title
WP Background Takeover <= 4.1.4 - Directory Traversal
Slug
backlink-monitoring-manager
Published
2024-12-19
Title
Backlink Monitoring Manager <= 0.1.3 - Reflected XSS
Slug
backstage
Published
2026-07-07
Title
Backstage <= 1.4.2 - Unauthenticated Privilege Escalation via Permissive Demo Role Capabilities
Slug
backtotop
Published
2025-03-11
Title
Back To Top <= 2.0 - Cross-Site Request Forgery
Slug
backup
Published
2016-02-15
Title
Backup Guard < 1.0.3 - Authenticated Arbitrary File Upload
Slug
backup
Published
2017-08-24
Title
BackupGuard < 1.1.47 - Authenticated Cross-Site Scripting (XSS)
Slug
backup
Published
2021-02-18
Title
Backup Guard < 1.6.0 - Authenticated Arbitrary File Upload
Slug
backup
Published
2020-07-30
Title
JetBackup < 1.4.1 - Subscriber+ Arbitrary Backup Location Update
Slug
backup
Published
2020-07-30
Title
JetBackup < 1.4.1 - Subscriber+ Sensitive Information Disclosure
Slug
backup
Published
2020-07-16
Title
JetBackup < 1.4.0 - Arbitrary File Upload via CSRF
Slug
backup
Published
2022-10-27
Title
JetBackup < 1.6.9.1 - Admin+ Stored XSS
Slug
backup
Published
2023-11-30
Title
JetBackup < 2.0.9.9 - Directory Listing Exposing Backups
Slug
backup
Published
2026-04-16
Title
JetBackup < 3.1.20.3 - Authenticated (Administrator+) Arbitrary Directory Deletion via Path Traversal in 'fileName' Parameter
Slug
backup
Published
2026-08-25
Title
JetBackup 3.1.18.8 - 3.1.23.3 - Admin+ Multisite Network Backup Download
Slug
backup
Published
2026-08-31
Title
JetBackup 3.1.7.9 - 3.1.23.3 - Subscriber+ Privilege Escalation via Restore Admin User Selection
Slug
backup-and-move
Published
2025-06-07
Title
Backup and Move <= 0.1 - Missing Authorization
Slug
backup-and-restore-for-wp
Published
2021-11-08
Title
Backup and Restore <= 1.0.3 - Admin+ Arbitrary File Deletion
Slug
backup-and-restore-for-wp
Published
2026-05-16
Title
Backup and Restore plugin – WordPress <= 1.0.3 - Authenticated (Subscriber+) Arbitrary File Deletion
Slug
backup-backup
Published
2021-11-17
Title
Backup Migration < 1.1.6 - Admin+ Stored Cross-Site Scripting
Slug
backup-backup
Published
2023-07-27
Title
Multiple Plugins from Inisev - Subscriber+ Plugin Installation
Slug
backup-backup
Published
2023-07-27
Title
Multiple Plugins from Inisev - Plugin Installation via CSRF
Slug
backup-backup
Published
2023-09-05
Title
Backup Migration < 1.3.0 - Cross-Site Request Forgery
Slug
backup-backup
Published
2023-11-30
Title
Backup Migration < 1.3.7 - Unauthenticated Arbitrary File Download to Sensitive Information Exposure
Slug
backup-backup
Published
2023-12-07
Title
Backup Migration Staging < 1.3.6 - Sensitive Data Exposure
Slug
backup-backup
Published
2023-12-11
Title
Backup Migration < 1.3.8 - Unauthenticated RCE