BackWPup – WordPress Backup & Restore Plugin

Explore BackWPup – WordPress Backup & Restore Plugin vulnerabilities across all versions. Currently tracking 11 known vulnerabilities, including severity, impact, and patch status.

Strategic Overview

Avg CVSSMedium

6.9/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all BackWPup – WordPress Backup & Restore Plugin vulnerabilities before they are exploited.

Vulnerability Records

11 records


2026-04-13 14:13	BackWPup <= 5.6.6 - Authenticated (Administrator+) Local File Inclusion via 'block_name' Parameter BackWPup <= 5.6.6	`CVE-2026-6227`	7.2 High	Pixel_DefaultBR	Yes
2026-02-18 00:00	BackWPup 5.0.0 - 5.6.2 - Authenticated (BackWPup Helper+) Privilege Escalation via Arbitrary Options Update BackWPup 5.0.0 – 5.6.2	`CVE-2025-15041`	7.2 High	0N0ise	Yes
2025-10-24 15:31	BackWPup 5 - 5.5.0 - Missing Authorization to Sensitive Information Exposure BackWPup 5 – 5.5.0	`CVE-2025-10579`	5.3 Medium	Dmitrii Ignatyev	Yes
2024-08-16 00:00	BackWPup <= 4.0.1 - Authenticated (Administrator+) Directory Traversal BackWPup <= 4.0.1	`CVE-2023-5505`	6.8 Medium	Marco Wotschka	Yes
2024-02-23 00:00	BackWPup <= 4.0.2 - Plaintext Storage of Backup Destination Password BackWPup <= 4.0.2	`CVE-2023-5775`	2.2 Low	Stefan Marjanov	Yes
2023-12-18 00:00	BackWPup <= 4.0.3 - Sensitive Information Exposure BackWPup <= 4.0.3	`CVE-2023-7164`	7.5 High	Dmitrii Ignatyev	Yes
2023-11-22 00:00	BackWPup <= 4.0.1 - Authenticated (Administrator+) Directory Traversal BackWPup <= 4.0.1	`CVE-2023-5504`	8.7 High	Marco Wotschka	Yes
2017-09-08 00:00	BackWPup <= 3.4.1 - Unauthenticated Backup Download BackWPup < 3.4.2	`CVE-2017-2551`	7.5 High	Larry W. Cashdollar	Yes
2013-08-21 00:00	BackWPup < 3.0.13 - Cross-Site Scripting BackWPup < 3.0.13	`CVE-2013-4626`	6.1 Medium	High-Tech Bridge Security Research Lab	Yes
2011-03-28 00:00	BackWPup <= 1.7.1 - Remote File Inclusion BackWPup <= 1.7.1	`CVE-2011-4342`	9.8 Critical	Phil Taylor - Sense of Security Labs	Yes

Showing 1–10 of 11 reports