EUVD-2011-4274

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

PHP vulnerability in BackWPup plugin allows remote code execution via wpabs parameter URL.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2011-4342	13 Mar 202613:52	–	circl
CVE	CVE-2011-4342	8 Oct 201218:00	–	cve
Cvelist	CVE-2011-4342	8 Oct 201218:00	–	cvelist
NVD	CVE-2011-4342	8 Oct 201218:55	–	nvd
OpenVAS	WordPress BackWPup Plugin < 1.7.1 'wpabs' Parameter Remote PHP Code Execution Vulnerability - Active Check	1 Apr 201100:00	–	openvas
Patchstack	WordPress BackWPup Plugin - Remote and Local Code Execution	28 Mar 201100:00	–	patchstack
Prion	Remote file inclusion	8 Oct 201218:55	–	prion
Positive Technologies	PT-2012-1866 · WordPress · Backwpup	8 Oct 201200:00	–	ptsecurity
RedhatCVE	CVE-2011-4342	22 May 202505:59	–	redhatcve
WPVulnDB	Backwpup < 1.7.2 - Remote File Inclusion	28 Mar 201100:00	–	wpvulndb

[
  {
    "enisaIdVendor": [
      {
        "id": "8840b80a-c686-380f-8318-588a29b6650a",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "675cb51c-8c74-3ec5-932c-69963cebccfb",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
wordpress	www.wordpress.org/support/topic/plugin-backwpup-remote-and-local-codeexecution-vulnerability-sos-11-003
osvdb	www.osvdb.org/71481
exploit-db	www.exploit-db.com/exploits/17056
senseofsecurity	www.senseofsecurity.com.au/advisories/SOS-11-003.pdf
seclists	www.seclists.org/fulldisclosure/2011/Mar/328
secunia	www.secunia.com/advisories/43565
openwall	www.openwall.com/lists/oss-security/2011/11/22/10
openwall	www.openwall.com/lists/oss-security/2011/11/22/7
packetstormsecurity	www.packetstormsecurity.org/files/view/99799/SOS-11-003.txt
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

6.2Medium risk

Vulners AI Score6.2

CVSS 27.5

EPSS0.03999