The BackWPup plugin for WordPress is vulnerable to Directory Traversal in versions up to, and including, 4.0.1 via the Log File Folder. This allows authenticated attackers to store backups in arbitrary folders on the server provided they can be written to by the server. Additionally, default...
8.7CVSS
8.4AI Score
0.0005EPSS
The WordPress plugin through 2.0.1 does not sanitise and escape the translation parameter before outputting it back in an admin page, leading to a Reflected Cross-Site...
6.1CVSS
6AI Score
0.001EPSS
Vulnerability in Wordpress plugin BackWPup before v3.4.2 allows possible brute forcing of backup file for...
7.5CVSS
7.5AI Score
0.004EPSS