WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
backup-bolt
Published
2025-08-19
Title
Backup Bolt <= 1.4.1 - Cross-Site Request Forgery
Slug
backup-bolt
Published
2025-10-02
Title
Backup Bolt < 1.5.0 - Authenticated (Admin+) Arbitrary File Download
Slug
backup-by-supsystic
Published
2021-02-08
Title
Backup by Supsystic <= 2.3.9 - Authenticated Arbitrary File Download and Deletion
Slug
backup-database
Published
2024-08-18
Title
Backup Database <= 4.9 - Admin+ Stored XSS
Slug
backup-scheduler
Published
2022-09-23
Title
Backup Scheduler <= 1.5.13 - Cross-Site Request Forgery
Slug
backup-wd
Published
2021-06-16
Title
Backup by 10Web <= 1.0.20 - Reflected Cross-Site Scripting (XSS)
Slug
backupbuddy
Published
2013-03-24
Title
Backupbuddy - importbuddy.php Direct Request Remote Backup File Disclosure
Slug
backupbuddy
Published
2013-03-24
Title
Backupbuddy - importbuddy.php step Parameter Manipulation Authentication Bypass
Slug
backupbuddy
Published
2015-03-24
Title
Backupbuddy - importbuddy.php step Parameter Remote PHP Information Disclosure
Slug
backupbuddy
Published
2013-03-24
Title
Backupbuddy - importbuddy.php Restore Operation Persistence Weakness
Slug
backupbuddy
Published
2022-09-06
Title
BackupBuddy < 8.7.5 - Unauthenticated Arbitrary File Access
Slug
backupbuddy
Published
2023-01-30
Title
BackupBuddy < 8.8.3 - Multiple Reflected Cross-Site Scripting
Slug
backuply
Published
2024-01-26
Title
Backuply – Backup, Restore, Migrate and Clone < 1.2.4 - Admin+ Directory Traversal
Slug
backuply
Published
2024-02-08
Title
Backuply - Backup, Restore, Migrate and Clone < 1.2.6 - Unauthenticated Denial of Service
Slug
backuply
Published
2024-03-15
Title
Backuply – Backup, Restore, Migrate and Clone < 1.2.8 - Admin+ Directory Traversal
Slug
backuply
Published
2024-09-13
Title
Backuply – Backup, Restore, Migrate and Clone < 1.3.5 - Authenticated (Admin+) SQL Injection
Slug
backuply
Published
2025-09-25
Title
Backuply < 1.4.9 - Admin+ Arbitrary File Deletion
Slug
backupwordpress
Published
2014-08-01
Title
BackUp <= 0.4.2b - RFI
Slug
backupwordpress
Published
2022-02-23
Title
BackupWordPress 3.12 - Subscriber+ Backup Disclosure
Slug
backupwordpress
Published
2024-04-26
Title
BackUpWordPress < 3.14 - Admin+ Directory Traversal
Slug
backwp
Published
2025-06-05
Title
Backwp <= 2.0.2 - Cross-Site Request Forgery
Slug
backwp
Published
2025-07-01
Title
Backwp <= 2.0.2 - Reflected Cross-Site Scripting
Slug
backwpup
Published
2014-08-01
Title
BackWPup 2.1.4 - Code Execution
Slug
backwpup
Published
2013-06-19
Title
BackWPup <= 3.0.12 - Authenticated Cross-Site Scripting (XSS)
Slug
backwpup
Published
2017-09-08
Title
BackWPup <= 3.4.1 - Backup File Download