BA
Product
BackWPup
5
CVEs
0
On KEV
7.5
Max CVSS
3
New 30D
Severity mix
Critical 0High 1Medium 4Low 0
Watch
Add BackWPup to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-7164 | 7.5 | Apr 8 | BackWPup < 4.0.4 - Unauthenticated Backup Download Affected: before 4.0.4 |
| CVE-2026-86828 | 6.6 | Oct 8 | BackWPup < 5.7.7 - Admin+ Path Traversal to RCE via Restore PclZip Fallback Affected: before 5.7.7 |
| CVE-2026-86826 | 5.9 | Oct 8 | BackWPup < 5.7.7 - Unauthenticated Sensitive Data Disclosure via Restore Working Directory on NGINX Affected: before 5.7.7 |
| CVE-2026-86815 | 5.5 | Sep 11 | BackWPup 5.2.2 - 5.7.4 - BackWPup Jobs Checker+ Database Backup Exfiltration via Missing Authorization on Job REST Routes Affected: 5.2.2 before 5.7.5 |
| CVE-2026-86827 | 5.3 | Oct 8 | BackWPup 3.3 - 5.7.6 - Unauthenticated Backup Job Execution via wp-cron.php Affected: 3.3 before 5.7.7 |
Showing 5