Wp Database Backup Security Vulnerabilities and Issues — Wp Database Backup CVE List

Lucene search

WpseedsWp Database Backup

8 matches found

CVE•added 2020/01/20 8:15 p.m.•81 views

CVE-2020-7241

The WP Database Backup plugin through 5.5 for WordPress stores downloads by default locally in the directory wp-content/uploads/db-backup/. This might allow attackers to read ZIP archives by guessing random ID numbers, guessing date strings with a 2020_{0..1}{0..2}_{0..3}{0..9} format, guessing UNI...

7.5CVSS7.4AI score0.005EPSS

CVE•added 2022/09/05 1:15 p.m.•68 views

CVE-2022-2271

The WP Database Backup WordPress plugin before 5.9 does not escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfiltered_html capability is disallowed (for example in multisite setup)

4.8CVSS4.8AI score0.00113EPSS

CVE•added 2019/08/12 3:15 p.m.•39 views

CVE-2016-10873

The wp-database-backup plugin before 4.3.3 for WordPress has XSS.

6.1CVSS6.4AI score0.0019EPSS

CVE•added 2019/08/12 3:15 p.m.•36 views

CVE-2016-10875

The wp-database-backup plugin before 4.3.1 for WordPress has XSS.

6.1CVSS6.4AI score0.00207EPSS

CVE•added 2019/08/12 3:15 p.m.•32 views

CVE-2019-14949

The wp-database-backup plugin before 5.1.2 for WordPress has XSS.

6.1CVSS6.3AI score0.0048EPSS

CVE•added 2019/08/12 3:15 p.m.•29 views

CVE-2016-10874

The wp-database-backup plugin before 4.3.3 for WordPress has CSRF.

8.8CVSS8.7AI score0.00202EPSS

CVE•added 2019/08/12 3:15 p.m.•28 views

CVE-2016-10876

The wp-database-backup plugin before 4.3.1 for WordPress has CSRF.

8.8CVSS8.7AI score0.00132EPSS

CVE•added 2025/07/25 3:15 a.m.•8 views

CVE-2019-25224

The WP Database Backup plugin for WordPress is vulnerable to OS Command Injection in versions before 5.2 via the mysqldump function. This vulnerability allows unauthenticated attackers to execute arbitrary commands on the host operating system.

9.8CVSS7.7AI score0.24388EPSS