CVE-2007-5800

🗓️ 03 Nov 2007 00:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 36 Views🌐 WEB

Multiple PHP remote file inclusion vulnerabilities in BackUpWordPress 0.4.2b and earlier

Reporter	Title	Published	Views	Family All 6
Cvelist	CVE-2007-5800	3 Nov 200700:00	–	cvelist
EUVD	EUVD-2007-5770	7 Oct 202500:30	–	euvd
NVD	CVE-2007-5800	3 Nov 200700:46	–	nvd
Patchstack	WordPress BackUpWordPress Plugin <= 0.4.2 - Remote File Inclusion	2 Nov 200700:00	–	patchstack
Prion	Remote file inclusion	3 Nov 200700:46	–	prion
canvas	Immunity Canvas: WPBACKUP_INCLUDE	3 Nov 200700:46	–	canvas

NVD

Node

AND

Source	Link
wordpress	www.wordpress.designpraxis.at/2007/11/01/security-vulnerability-in-backupwordpress/
vupen	www.vupen.com/english/advisories/2007/3744
exploit-db	www.exploit-db.com/exploits/4593
osvdb	www.osvdb.org/38479
osvdb	www.osvdb.org/38476
osvdb	www.osvdb.org/38477
securityfocus	www.securityfocus.com/bid/26290
wordpress	www.wordpress.designpraxis.at/2007/11/01/backupwordpress-security-release/
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/38212
osvdb	www.osvdb.org/38478

Parameter	Position	Path	Description	CWE
bkpwp_plugin_path	query param	plugins/BackUp/Archive.php	BackUpWordPress <= 0.4.2b RFI via bkpwp_plugin_path allows remote PHP code execution	CWE-94
bkpwp_plugin_path	query param	plugins/BackUp/Archive/Predicate.php	BackUpWordPress <= 0.4.2b RFI via bkpwp_plugin_path allows remote PHP code execution	CWE-94
bkpwp_plugin_path	query param	plugins/BackUp/Archive/Writer.php	BackUpWordPress <= 0.4.2b RFI via bkpwp_plugin_path allows remote PHP code execution	CWE-94
bkpwp_plugin_path	query param	plugins/BackUp/Archive/Reader.php	BackUpWordPress <= 0.4.2b RFI via bkpwp_plugin_path allows remote PHP code execution	CWE-94

23 Apr 2026 00:35Current

7.8High risk

Vulners AI Score7.8

CVSS 26.8

EPSS0.0749