wpbackitup Backup and Restore WordPress vulnerabilities

Latest wpbackitup Backup and Restore WordPress CVEs

Newest publication first

1. CVE-2024-43268 WordPress Backup and Restore WordPress plugin <= 1.50 - Broken Access Control vulnerability

   Published 2024-11-01

   Medium·CVSS 5.4 EPSS 0.32%

   Access Control vulnerability in WPBackItUp Backup and Restore WordPress allows . This issue affects Backup and Restore WordPress: from n/a through 1.50.

2. CVE-2024-43270 WordPress Backup and Restore WordPress plugin <= 1.50 - Unauthenticated Broken Access Control vulnerability

   Published 2024-11-01

   Medium·CVSS 5.3 EPSS 0.38%

   Missing Authorization vulnerability in WPBackItUp Backup and Restore WordPress allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Backup and Restore WordPress: from n/a through 1.50.

3. CVE-2024-43269 WordPress Backup and Restore WordPress plugin <= 1.50 - Cross Site Request Forgery (CSRF) vulnerability

   Published 2024-08-26

   Medium·CVSS 4.3 EPSS 0.18%

   Cross-Site Request Forgery (CSRF) vulnerability in WPBackItUp Backup and Restore WordPress.This issue affects Backup and Restore WordPress: from n/a through 1.50.

4. CVE-2023-7232 Backup and Restore WordPress <= 1.45 - Unauthenticated Sensitive Data Exposure

   Published 2024-03-26

   Medium·CVSS 5.3 EPSS 0.57%

   The Backup and Restore WordPress WordPress plugin through 1.45 does not protect some log files containing sensitive information such as site configuration etc, allowing unauthenticated users to access such data

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.