WordPress Plugin Vulnerabilities

WP Backitup <= 1.9.1 - Backup File Disclosure

Description

The Backup and Restore WordPress – Backup Plugin WordPress plugin was affected by a Backup File Disclosure security vulnerability.

Affects Plugins

Plugin icon
wp-backitup
Fixed in 1.9.2

References

URL
https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=1031761%40wp-backitup&old=1027647%40wp-backitup&sfp_email=&sfph_mail=

Miscellaneous

Submitter
ethicalhack3r
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
aa08a485-36df-4a8f-9a28-3416503ddd5b

Timeline

Publicly Published
2014-07-16 (about 11 years ago)
Added
2015-07-16 (about 10 years ago)
Last Updated
2019-10-22 (about 6 years ago)

Other

Published
Title
Published
2017-05-16
Title
WordPress 3.4.0-4.7.4 - XML-RPC Post Meta Data Lack of Capability Checks
Published
2021-04-21
Title
iThemes Security Free (< 7.9.1) & Pro (< 6.8.4) - Hide Backend Bypass
Published
2022-11-21
Title
All In One WP Security & Firewall < 5.0.8 - IP Spoofing
Published
2020-05-06
Title
Elementor < 2.9.8 - SVG Sanitizer Bypass leading to Authenticated Stored XSS
Published
2026-02-17
Title
Passster < 4.2.24 - Password Protection Bypass