Skip to content
OpenAdvisories

Vendor

Backup Bolt

2 known vulnerabilities.

Products

Backup Bolt 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.8
    CVE-2025-10306

    Backup Bolt <= 1.4.1 - Authenticated (Admin+) Arbitrary File Download

    The Backup Bolt plugin for WordPress is vulnerable to arbitrary file downloads and backup location writes in all versions up to, and including, 1.4.1 via the process_backup_batch() function. This makes it possible for authenticated attackers, with Administrat…

    Backup Bolt Backup Bolt Web / CMS