Vulnerabilities / BackWPup – WordPress Backup & Restore Plugin
BackWPup – WordPress Backup & Restore Plugin vulnerabilities
Advisories WPSec published for BackWPup – WordPress Backup & Restore Plugin. Other sources may list more. Its attack surface: BackWPup – WordPress Backup & Restore Plugin on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-07 | WPSEC-2026-0502 | BackWPup – WordPress Backup & Restore Plugin <= 5.7.6 - Unauthenticated Sensitive Information Exposure via Predictable Restore Working Directory | Medium 5.9 | 5.7.7 |
| 2026-10-07 | WPSEC-2026-0501 | BackWPup – WordPress Backup & Restore Plugin <= 5.7.6 - Missing Authorization to Unauthenticated Backup Job Execution | Medium 6.5 | 5.7.7 |
License: CC BY 4.0