plugin

Wp Backup Plus Vulnerabilities

7 known security issues reported for the Wp Backup Plus WordPress plugin. Most recent disclosed May 7, 2019.

2 high

Running Wp Backup Plus on your site? Check whether your installed version is affected.

Scan your site free

WP Backup+ <= 2018-11-22 - Sensitive Information Disclosure

high

The WP Backup+ (aka WPbackupplus) plugin through 2018-11-22 for WordPress allows remote attackers to obtain sensitive information from server folders and files, as demonstrated by download.sql.

CVSS:
7.5
Affected:
up to 2018-11-22
Fix:
No patched version reported
Disclosed:
May 7, 2019

CVE-2018-19456 on NVD →

WP Backup Plus [wp-backup-plus] <= 2.6.15 (closed)

unknown

[en] The WP Backup+ (aka WPbackupplus) plugin through 2018-11-22 for WordPress allows remote attackers to obtain sensitive information from server folders and files, as demonstrated by download.sql.

Affected:
up to 2.6.15
Fixed in:
2.6.15
Disclosed:
May 7, 2019

CVE-2018-19456 on NVD →

WP Backup+ (Unknown Versions) - Sensitive Information Disclosure

high

The WP Backup+ plugin for WordPress is vulnerable to Sensitive Data Exposure via the temp directory. This can allow unauthenticated attackers to extract sensitive data including full site backups.

CVSS:
7.5
Affected:
up to *
Fix:
No patched version reported
Disclosed:
May 15, 2015

WP Backup Plus [wp-backup-plus] < 1.1

unknown

This plugin is prone to exposure backup file to unauthorized control vulnerability. Update the plugin.

Affected:
up to 1.1
Fixed in:
1.1
Disclosed:
May 15, 2015

WP Backup Plus [wp-backup-plus] < 100 (unfixed + closed)

unknown

The WP Backup+ plugin for WordPress is vulnerable to Sensitive Data Exposure via the temp directory. This can allow unauthenticated attackers to extract sensitive data including full site backups.

Affected:
up to 100
Fix:
No patched version reported
Disclosed:
May 15, 2015

WP Backup Plus [wp-backup-plus] < 1.1

unknown

WP Backup Plus plugin is prone to a database and files backup download vulnerability. Upgrade the plugin.

Affected:
up to 1.1
Fixed in:
1.1
Disclosed:
Jul 20, 2014

WP Backup Plus [wp-backup-plus] < 100 (unfixed + closed)

unknown

The wp-backup-plus WordPress plugin was affected by a Backup Disclosure security vulnerability.

Affected:
up to 100
Fix:
No patched version reported

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database