WordPress Plugin Vulnerabilities

BackWPup 2.1.4 - Code Execution

Description

The BackWPup – WordPress Backup Plugin WordPress plugin was affected by a Code Execution security vulnerability.

Affects Plugins

Plugin icon
backwpup
Fixed in 2.1.5

References

Exploitdb
17987

Classification

Type
RCE
OWASP top 10
A1: Injection
CWE
CWE-94

Miscellaneous

Verified
No
WPVDB ID
636a5282-1529-4edc-8c94-953dcc89ac64

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2022-03-22
Title
Woo Product Table < 3.1.2 - Unauthenticated Arbitrary Function Call
Published
2021-12-05
Title
WP Coder < 2.5.2 - RFI leading to RCE via CSRF
Published
2024-12-02
Title
s2Member (Pro) < 241216 - Unauthenticated Remote Code Execution
Published
2024-12-12
Title
Coupon Affiliates – Affiliate Plugin for WooCommerce < 5.16.7.2 - Unauthenticated Arbitrary Shortcode Execution and Reflected Cross-Site Scripting
Published
2023-11-21
Title
WP All Export (Free < 1.4.0, Pro < 1.8.6) - Admin+ RCE