WordPress Plugin Vulnerabilities

Backupbuddy - importbuddy.php Restore Operation Persistence Weakness

Description

The backupbuddy WordPress plugin was affected by an importbuddy.php Restore Operation Persistence Weakness security vulnerability.

Affects Plugins

Plugin icon
backupbuddy
Fixed in 3.0

References

CVE
CVE-2013-2742
URL
https://packetstormsecurity.com/files/#120923/
URL
https://seclists.org/fulldisclosure/2013/Mar/206

Classification

Type
AUTHBYPASS
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-287

Miscellaneous

Verified
No
WPVDB ID
c3ee2e43-7572-46cf-9f18-a88fe28efa4d

Timeline

Publicly Published
2013-03-24 (about 13 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2021-11-02
Title
WP DSGVO Tools (GDPR) < 3.1.24 - Unauthenticated Arbitrary Post Deletion
Published
2025-02-08
Title
WP Directorybox Manager <= 2.5 - Authentication Bypass
Published
2024-07-08
Title
WP2Speed Faster – Optimize PageSpeed Insights Score 90-100 <= 1.0.1 - Improper Authorization due to use of Hardcoded Credentials
Published
2025-12-15
Title
WPCOM Member < 1.7.17 - Authentication Bypass via Weak OTP
Published
2023-11-21
Title
UserPro < 5.1.2 - Authentication Bypass to Administrator