Backup and Restore plugin – WordPress <= 1.0.3 - Authenticated (Subscriber+) Arbitrary File Deletion
high
The Backup and Restore plugin – WordPress plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in all versions up to, and including, 1.0.3. This makes it possible for authenticated attackers, with subscriber-level access and above, to delete arbitrary files on the serve...
- CVSS:
- 7.1
- Affected:
- up to 1.0.3
- Fix:
- No patched version reported
- Disclosed:
- May 16, 2026
CVE-2021-47979 on NVD →
Backup and Restore plugin – WordPress <= 1.0.3 - Authenticated (Admin+) Arbitrary File Deletion
medium
The Backup and Restore plugin – WordPress plugin for WordPress is vulnerable to Arbitrary File Deletion via the 'folder_name' parameter in versions up to, and including, 1.0.3. This is due to insufficient sanitization and validation of user-supplied input. This makes it possible for authenticated attackers with admin-l...
- CVSS:
- 5.5
- Affected:
- up to 1.0.3
- Fix:
- No patched version reported
- Disclosed:
- Nov 8, 2021
Protect your WordPress site
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free
← Back to the vulnerability database