WordPress Plugin Vulnerabilities

BackWPup <= 3.4.1 - Backup File Download

Description

The BackWPup – WordPress Backup Plugin WordPress plugin was affected by a Backup File Download security vulnerability.

Affects Plugins

Plugin icon
backwpup
Fixed in 3.4.2

References

CVE
CVE-2017-2551
URL
http://www.vapidlabs.com/advisory.php?v=201
URL
https://plugins.trac.wordpress.org/changeset/1737123/backwpup

Miscellaneous

Submitter
ethicalhack3r
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
e6d32017-bd88-4472-a0f8-80dbbd538fdc

Timeline

Publicly Published
2017-09-08 (about 8 years ago)
Added
2017-09-28 (about 8 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2016-04-25
Title
iThemes Security <= 5.3.5 - Lack of Capability Check
Published
2024-05-28
Title
Login with phone number < 1.7.27 - Authentication Bypass due to Missing Empty Value Check
Published
2018-12-13
Title
WordPress <= 5.0 - Authenticated Post Type Bypass
Published
2024-04-15
Title
Zero Spam < 5.5.7 - Spam Protection Bypass
Published
2024-08-30
Title
IP Vault – WP Firewall < 2.1 - IP Address Spoofing to Protection Mechanism Bypass