WP Backup+ <= 2018-11-22 - Sensitive Information Disclosure
high
The WP Backup+ (aka WPbackupplus) plugin through 2018-11-22 for WordPress allows remote attackers to obtain sensitive information from server folders and files, as demonstrated by download.sql.
- CVSS:
- 7.5
- Affected:
- up to 2018-11-22
- Fix:
- No patched version reported
- Disclosed:
- May 7, 2019
CVE-2018-19456 on NVD →
WP Backup Plus [wp-backup-plus] <= 2.6.15 (closed)
unknown
[en] The WP Backup+ (aka WPbackupplus) plugin through 2018-11-22 for WordPress allows remote attackers to obtain sensitive information from server folders and files, as demonstrated by download.sql.
- Affected:
- up to 2.6.15
- Fixed in:
- 2.6.15
- Disclosed:
- May 7, 2019
CVE-2018-19456 on NVD →
WP Backup+ (Unknown Versions) - Sensitive Information Disclosure
high
The WP Backup+ plugin for WordPress is vulnerable to Sensitive Data Exposure via the temp directory. This can allow unauthenticated attackers to extract sensitive data including full site backups.
- CVSS:
- 7.5
- Affected:
- up to *
- Fix:
- No patched version reported
- Disclosed:
- May 15, 2015
WP Backup Plus [wp-backup-plus] < 1.1
unknown
This plugin is prone to exposure backup file to unauthorized control vulnerability.
Update the plugin.
- Affected:
- up to 1.1
- Fixed in:
- 1.1
- Disclosed:
- May 15, 2015
WP Backup Plus [wp-backup-plus] < 100 (unfixed + closed)
unknown
The WP Backup+ plugin for WordPress is vulnerable to Sensitive Data Exposure via the temp directory. This can allow unauthenticated attackers to extract sensitive data including full site backups.
- Affected:
- up to 100
- Fix:
- No patched version reported
- Disclosed:
- May 15, 2015
WP Backup Plus [wp-backup-plus] < 1.1
unknown
WP Backup Plus plugin is prone to a database and files backup download vulnerability.
Upgrade the plugin.
- Affected:
- up to 1.1
- Fixed in:
- 1.1
- Disclosed:
- Jul 20, 2014
WP Backup Plus [wp-backup-plus] < 100 (unfixed + closed)
unknown
The wp-backup-plus WordPress plugin was affected by a Backup Disclosure security vulnerability.
- Affected:
- up to 100
- Fix:
- No patched version reported
Protect your WordPress site
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free
← Back to the vulnerability database