Skip to content
OpenAdvisories

Product · WP Media

BackWPup – WordPress Backup & Restore Plugin

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2025-10579

    BackWPup <= 5.5.0 - Missing Authorization to Sensitive Information Exposure

    The BackWPup – WordPress Backup & Restore Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'backwpup_working' AJAX action in all versions up to, and including, 5.5.0. This makes it possible for …

    WP Media BackWPup – WordPress Backup & Restore Plugin Web / CMS
  • Medium 6.8
    CVE-2023-5505

    BackWPup <= 4.0.1 - Authenticated (Administrator+) Directory Traversal

    The BackWPup plugin for WordPress is vulnerable to Directory Traversal in versions up to, and including, 4.0.1 via the job-specific backup folder. This allows authenticated attackers to store backups in arbitrary folders on the server provided they can be wri…

    WP Media BackWPup – WordPress Backup & Restore Plugin Web / CMS