BackWPup – WordPress Backup & Restore Plugin vulnerabilities
3 known vulnerabilities in BackWPup – WordPress Backup & Restore Plugin from WP Media. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.2 High severity
BackWPup – WordPress Backup & Restore Plugin: Improper Limitation of a Pathname to a Restricted Directory
The BackWPup plugin for WordPress is vulnerable to Local File Inclusion via the `block_name` parameter of the `/wp-json/backwpup/v1/getblock` REST endpoint in all versions up to, and including, 5.6.6 due to a non-recursive `str_replace()` sanitization of path
- 7.2 High severity
BackWPup – WordPress Backup & Restore Plugin: Missing Authorization
The BackWPup – WordPress Backup & Restore Plugin plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the save_site_option() function in all versions up to, and inclu
- 8.7 High severity
BackWPup – WordPress Backup & Restore Plugin: Improper Limitation of a Pathname to a Restricted Directory
The BackWPup plugin for WordPress is vulnerable to Directory Traversal in versions up to, and including, 4.0.1 via the Log File Folder. This allows authenticated attackers to store backups in arbitrary folders on the server provided they can be written to by t