Backup by Supsystic

Backup by Supsystic has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2021 and 2026; 1 is fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 8.1, and the most serious one scores 8.1 out of 10. Severity breakdown: 0 critical and 2 high.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (50%). Other recurring categories include PHP Remote File Inclusion.

1 of the records (50%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2026.

All of these findings were reported by Erik David Martin.

01234567891008.02.2021Today08.02.20218.1Backup by Supsystic <= 2.3.11 - Cross-Site Request Forgery to Arbitrary File Download/Deletion CVSS 8.1 · 08.02.202116.05.20268.1Backup by Supsystic <= 2.3.9 - Unauthenticated Local File Inclusion CVSS 8.1 · 16.05.2026

Strategic Overview

Avg CVSSHigh
8.1/ 10
Patch Coverage50%
Open

1

Fixed

1

Get automatic notifications for all Backup by Supsystic vulnerabilities before they are exploited.

Most severe open issueCVSS 8.1CVE-2020-37246

Backup by Supsystic <= 2.3.9 - Unauthenticated Local File Inclusion

Read the full analysis

Vulnerability Records

2 records
Showing 1–2 of 2 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C