BackupBuddy

BackupBuddy has 6 disclosed vulnerabilities in the WordSec catalog, reported between 2013 and 2023; all 6 are fixed as of September 2026. Their average CVSS score is 8.0, and the most serious one scores 9.8 out of 10. Severity breakdown: 3 critical and 1 high. 2013 was the busiest year with 4 disclosures.

The most common weakness is Improper Authentication, behind 3 of the records (50%). Other recurring categories include Cross-Site Scripting, Exposure Of Sensitive Information To An Unauthorized Actor.

Every one of the 6 issues recorded for BackupBuddy has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, most of them (4) reported by Rob Armstrong.

Strategic Overview

Avg CVSSHigh

8.0/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all BackupBuddy vulnerabilities before they are exploited.

Highest severity on recordCVSS 9.8CVE-2013-2741

BackupBuddy < 3.0 - Authentication Bypass

Read the full analysis

Vulnerability Records

6 records


2023-01-30 00:00	BackupBuddy <= 8.8.2 - Reflected Cross-Site Scripting BackupBuddy <= 8.8.2	`CVE-2022-4897`	6.1 Medium	WPScanTeam	Yes
2022-09-06 00:00	BackupBuddy 8.5.8.0 - 8.7.4.1 - Arbitrary File Download BackupBuddy 8.5.8.0 – 8.7.4.1	`CVE-2022-31474`	7.5 High	Anonymous	Yes
2013-03-24 00:00	BackupBuddy <= 2.2.28 - Sensitive Information Disclosure BackupBuddy < 3.0	`CVE-2013-2744`	5.3 Medium	Rob Armstrong	Yes
2013-03-24 00:00	BackupBuddy < 3.0 - Authentication Bypass BackupBuddy < 3.0	`CVE-2013-2741`	9.8 Critical	Rob Armstrong	Yes
2013-03-24 00:00	BackupBuddy < 3.0 - Authentication Bypass BackupBuddy < 3.0	`CVE-2013-2742`	9.8 Critical	Rob Armstrong	Yes
2013-03-24 00:00	BackupBuddy < 3.0 - Authentication Bypass BackupBuddy < 3.0	`CVE-2013-2743`	9.8 Critical	Rob Armstrong	Yes

Showing 1–6 of 6 reports