CVE-2023-7164

The BackWPup WordPress plugin (versions prior to 4.0.4 ) is vulnerable to a Directory Listing vulnerability due to a lack of access restrictions in its temporary backup folder. This flaw allows unauthenticated attackers to browse the folder and download site database backups, potentially leading ...

CVE-2023-5775

CVE-2023-5775 : BackWPup for WordPress stores backup destination passwords in plaintext in all versions up to 4.0.2. The root cause is plaintext storage of credentials, enabling an authenticated administrator to retrieve the password from the UI or the options table. Remediation: upgrade to a ver...

CVE-2023-5505

CVE-2023-5505 refers to BackWPup – WordPress Backup & Restore Plugin. Affected: BackWPup