CVE-2026-9834

creationtimestamp| type| source ---|---|--- 2026-07-02 22:24:11+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpp347yr6a2i 2026-07-03 03:25:48+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpplxkncsu27...

CVE-2026-9834

The WP Database Backup – Unlimited Database & Files Backup by Backup for WP plugin for WordPress is vulnerable to OS Command Injection in all versions up to and including 7.11 via the wpdbexcludetable parameter. This is due to the direct concatenation of user-supplied $POST'wpdbexcludetable' valu...