Skip to content
OpenAdvisories

Product · bearsthemes

Bears Backup

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2025-5396

    Bears Backup <= 2.0.0 - Unauthenticated Remote Code Execution

    The Bears Backup plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.0.0. This is due to the bbackup_ajax_handle() function not having a capability check, nor validating user supplied input passed directly to ca…

    bearsthemes Bears Backup Web / CMS